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$LSBIT Rollout 
Is Rx for Kaiser 


HMO halts internal medical records project 
with IBM, switches to commercial software 





BY BOB BREWIN 
Kaiser Permanente Health 
Plan Inc. last week announced 
a $1.8 billion project to deploy 
an automated medical records 
system for its 8.4 million 
members, its second attempt 
to use technology to eliminate 
paper-based charts and files. 
Analysts said the new sys- 
tem, which is intended to be 
used by Kaiser’s 11,000 physi- 
cians and their patients, would 
be the largest health care IT 
system ever developed outside 
the federal government in 
terms of cost, scale and scope. | 





Oakland, Calif.-based Kais- 


| er, the largest nonprofit health 


maintenance organization in 
the U.S., plans to use software 
developed by Epic Systems 
Corp. in Madison, Wis., to 
store medical records elec- 
tronically. Epic’s software pro- 
vides a repository that inte- 
grates all types of data, includ- 
ing patient charts, physician 
order entry forms, clinical 
notes, nursing documentation 
and pharmacy information. 
Kaiser had previously 
worked with IBM to develop 
Kaiser, page 57 
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IN THEIR QUEST to come 
up with even more ways 
to wring out savings, 

IT leaders are exploring 
everything from striking 
barter agreements with 
vendors to reselling 
services and joining 
purchasing consortia. 
One example: Wyndham 
International CTO Mark 
Hedley (left) is considering 
swapping hotel rooms 

in return for computer 
equipment from hardware 
vendors. SEE PAGE 41 
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Shuttle Debris 


BY BOB BREWIN AND 
PATRICK THIBODEAU 

Within hours of the space shut- 
tle Columbia’s disintegration 
over East Texas, geographic in- 
formation system departments 
at Stephen F. Austin State Uni- 
versity in Nacogdoches, Texas, 
marshaled their researchers and 
students to help pinpoint the lo- 
cation of shuttle debris. Their 
ongoing work is expected to 
help investigators determine 
what went wrong. 

The data collection effort is 
aiding the search by defining the 
path of the debris and narrowing 
the area to search, according to 
Darrel McDonald, director of 
the university’s Humanities Un- 
dergraduate Environmental Sci- 

Debris, page 6 
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IT Cutbacks at 
NASA Raised 
Safety Concerns 


BY DAN VERTON 
NASA has a history of IT work- 
force management and funding 
problems that may have con- 
tributed to safety oversights, ac- 
cording to critics and indepen- 
dent government audits. 

Of particular interest is a Sep- 
tember 2001 report by the Gen- 
eral Accounting Office, the in- 
vestigative arm of Congress, that 
warned of potential safety prob- 
lems stemming from engineer- 
ing and IT staffing cutbacks that 
date back several years. 

“The existing workforce was 
stretched thin to the point 
where many areas critical to 
shuttle safety, such as mechani- 
cal engineering, computer sys- 
tems and software assurance en- 

Cutbacks, page 7 
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Recognize anyot those issues? Or, perhaps, all of them? We thought 
so. Many ofthese issues can be related to your legacy desktop 
software. Jprtunately, many of them can be addressed oad features in 
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Want specific examples? Windows XP Professional offers new 
Remote Assistance, which enables you to view a user's screen and 


control the user’s computer to solve technical problems from afar. 
Office XP Professional gives you installation support for HTTP, 


Needs to shar 


HTTPS, and FTP, which means you can install and maintain the suite 
directly from a Web server or a file share on your network. And finally, 
several new features make deployment easier than ever. For more 
ideas about managing your desktops, visit microsoft.com/desktop 
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QuickStudy: Data Scrubbing 


In the Technology section: Data scrubbing is the process 
of fixing or eliminating individual data that’s incorrect, 
incomplete, inconsistent or redundant before it goes to 
a data warehouse or another application. Page 32 
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6-7 Special Report: NASA uses IT 
to determine the causes of the 
Columbia disaster, while 
reaching out to the private 
sector to overcome its history 
of technical problems. 


Nortel rolls out five new and 
upgraded switches, a move 
that could lead to a market 
battle with Cisco. 


Sun releases a slew of prod- 
ucts aimed at the low-end 
server market. 


J2EE Version 1.4 is delayed, 
so Sun can add support for 
key Web services standards. 


MySAP.com expires as a 
brand name, but some users 
aren’t mourning its departure. 


IBM has begun beta-testing 
data repository integration 
tools. 


Visual Studio .Net gets its 
first birthday party from Mi- 
crosoft, as Borland and other 
vendors provide gifts in the 
way of support. 


EMC’s new high-end Sym- 
metrix disk array line faces 
storage user skepticism. 


Sybase’s mobile software 
unit, iAnywhere Solutions, an- 
nounces a security product 
that can zap data from stolen 
portable devices. 


57 IT portfolio management pro- 
vides a gauge for high-tech in- 
vestments and is increasingly 
accepted, but faces hurdles in 
adoption. 
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Debris 


ences GIS program. 

That program, in collabora- 
tion with the university’s For- 
est Resources Institute, de- 
ployed seven field teams on 
Feb. 1, the day of the disaster, 
to collect precise location in- 
formation of shuttle debris by 
means of Global Positioning 
System (GPS) receivers. By 
midweek, there were 60 to 70 
teams with as many as 200 
people collecting debris data. 


Fine-Tuning Raw Data 
The field crews are using GPS 
receivers from Trimble Navi- 
gation Ltd. in Sunnyvale, Calif. 
The location information is 
stored in a “datalogger,” a 
memory unit onboard the re- 
ceiver, and is subsequently 
run through Trimble post- 
processing software to en- 
hance its accuracy. 

The postprocessing soft- 
ware correlates the field mea- 


Hi !3 i OF 
CE 


surements with data obtained 
over a Web link from a pre- 
cisely surveyed GPS reference 
base 38 miles north of Nacog- 
| doches. Although raw data re- 
ceived from the 24-satellite 
GPS array provides location 
accuracy to within 100 feet, 
postprocessing improves that 





GIS FIELD TEAMS from Stephen F. Austin University in 
Nacogdoches, Texas, are using GPS receivers to define 
the debris field and pinpoint pieces of the shuttle. 


accuracy to about 3 feet, ac- 
cording to McDonald. 

The finely tuned data is fur- 
ther processed by ArcInfo GIS 
software from Environmental 
Systems Research Institute 
Inc. (ESRI) in Redlands, Calif. 
The ESRI software plots the 


| data points on a digital map 


New Parts-Marking Technology 
Would Have Helped Investigators 


BY JAIKUMAR VIJAYAN 
A highly durable product- 
marking system approved 

for use by NASA in 2001 and 
currently being tested on the 
International Space Station 
would have helped investiga- 
tors identify the debris from 
Columbia, had the technology 
been available when the or- 
biter was being built. 

The 2-D marking system, 
called Data Matrix, is based on 
compressed symbology tech- 
nology patented by a Canton, 
Mass.-based company called 
RVSI and released for use in 
the public domain. 

The Data Matrix symbol is a 
checkerboardlike mark that’s 
etched permanently onto a 
surface. The mark is scanned 
using a charge-coupled device 
or optical reader. It’s similar to 
a bar code, but it’s capable of 
storing up to 100 times more 
information than a bar code, 
RVSI officials said. Data Ma- 


trix symbols were designed to 
withstand extremely harsh 
conditions, said Donald Rox- 
by, director of The Symbology 
Research Center, a Huntsville, 
Ala.-based unit of RVSI. 

“Tests at Marshall [Space 
Flight Center] verified the 
mark would survive the 18,000- 
mile-per-hour slipstreams and 
temperatures in excess of 
2,300 degrees” associated with 
orbiter re-entry, he said. “The 
symbols could sustain up to 
30% damage and still provide 
100% of the [encoded] data.” 

Jerry Berg, a spokesman for 
the Marshall Space Flight Cen- 
ter in Huntsville, said the or- 
ganization was unable to com- 
ment because the official in 
charge of the Data Matrix ef- 
fort was not available. 

But since the 2-D etches are 
typically made during the 
manufacturing process, Roxby 
said, none of Columbia’s parts 
| — except for three tiles that 








were recently replaced — car- 
ried the Data Matrix symbol. 

The symbols would have 
made it easier for investigators 
to identify parts of the Colum- 
bia orbiter, he added. 

Data Matrix symbols of var- 
ious sizes and on different ma- 
terials are being tested on the 
International Space Station to 
see how well they hold up in 
space, Roxby said. “The last 
photos we saw show these 
marks to be still in 


| very good condi- 


tion and readable,” 
he said. 

The goal behind 
marking parts in 
this manner was to 
improve NASA‘s 
ability to check the 
manufacturing his- 
tory and opera- 
tional data of parts 
use in a shuttle, 
said Erin Binder, a 
director at Golden 





NEWS SPECIAL REPORT 


overlaid with information 
gleaned from existing databas- 
es about road locations and 
topographic features and en- 
hanced by satellite photos. 

As the university’s GIS labs 
collect raw debris-location 
data, federal agencies are tap- 
ping into existing GIS data- 
bases in East Texas, said Van 
Bush, 911 director for the Deep 
East Texas Council of Govern- 
ments. Bush said federal agen- 
cies at a central command 
post in Lufkin, Texas, have re- 
quested copies of all GIS files 
used by the seven counties in 
East Texas. He said the GIS 
files, totaling approximately 
70MB of data, show topogra- 
phy, roads and structures in a 
9,906-sq.-mi. area. 

Gary Jeffress, coordinator of 
geographic information sci- 
ence at Texas A&M Universi- 
ty-Corpus Christi, said the 
shuttle investigators will likely 
use the location data to identi- 
fy which parts of the shuttle 
disintegrated first in order to 
reconstruct the disaster. D 


Valley, Minn.-based Veritec 
Inc., another company that has 
also worked with NASA to de- 
velop a compressed symboio- 


| gy standard for marking shut- 


tle parts. 

Unlike bar codes, which 
don’t work on certain surfaces 
and can peel off, compressed 
symbols like Data Matrix can 
be applied permanently to a 
variety of surfaces, Roxby said. 

To mark the three tiles on 
Columbia, small recesses were 
etched out of each tile and 
filled with a ceramic paint that 
would melt permanently into 
the tile from the heat on re- 
entry, Roxby said. D 
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Storage Key 
To NASA 
Investigation 


BY LUCAS MEARIAN 

NASA officials said last week that 
voice messages, video and photos 
being collected from the public are 
creating a data picture that will play a 
key role in determining the cause of 
the Columbia disaster. The trick will 
be managing that data. 

Agency officials said they're con- 
sidering using tools developed in- 
house, including a Web-based appli- 
cation called the InvestigationOrga- 
nizer that was rolled out in Novem- 
ber, to aggregate the data. The appli- 
cation provides data storage, man- 
agement and analysis capabilities to 
accident investigation teams. 

Tina Panotin, chief engineer at 
NASA's Ames Research Center at 
Moffett Field in California, said in an 
e-mail interview last week that 
InvestigationOrganizer “is currently 
being assessed against the investi- 
gation teams’ requirements, as are 
other options.” 

NASA is asking members of the 
public to send videos and photos 
of the shuttle breakup to an FTP 
site at www.nasa.gov/columbia/ 
COL_upload.html. 

“The public has been tremendous- 
ly responsive. They've been respond- 
ing to the Web sites; they've been re- 
sponding to the hot lines,” Robert 
Mirelson, chief of news and informa- 
tion at NASA headquarters in Wash- 
ington, said during a press briefing 
last week. 

In the past, NASA said its acci- 
dent investigation teams had no 
standard methods or tools for infor- 
mation storage, management, dis- 
semination or analysis. 

NASA's InvestigatorOrganizer 
uses a database, a document- 
sharing system and a Web-based 
data navigation system that allows 
scientists to browse through infor- 
mation and organize it and file it so it 
can be accessed online in a common 
file-sharing system. The software is 
password-protected and employs 
encryption technology to ensure se 
curity, NASA officials said. 

Whether InvestigationOrganizer is 
used or not, Panotin said, “all data is 
being treated with the appropriate 
security and with the consideration 
that the data must be made available 
to the investigation teams.” D 
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NASA Reinvents ‘Troubled IT 
With Help of Private Sector 


Space agency reaches out to improve 
mission software, business systems. 





BY PATRICK THIBODEAU 
WASHINGTON 
HE Columbia disas- 
ter has confronted 
NASA at a time 
when the agency is 
working to move past a trou- 
bled IT history that includes 
canceling major business- 
system projects, being victim- 
ized by security breaches and 
dealing with software glitches 
that have doomed unmanned 
probes. 

Two attempts by NASA to 
replace its disparate, propri- 
etary business systems, which 
are used to manage its $15 bil- 
lion budget, ended in failure. 
But just as disturbing for the 
agency was the software bug 
blamed for the loss of the 
Mars Polar Lander in 1999. 
“Software testing was inade- 
quate,” a NASA study said. 

To address these problems, 
NASA is increasingly reaching 
out to the private sector for 
help to improve mission soft- 
ware and is adopting private- 
sector business practices and 
systems. Together, these ef- 
forts are changing the way 
NASA manages IT. 

The space agency’s largest 
IT project is its $644 million 
effort to create an enterprise 
backbone for finance, human 
resources and other business 
functions to replace its dis- 
parate systems. 

NASA is using an enterprise 
resource planning system 
from SAP AG to build its 
backbone, adding business 
processes as modules, said 
Mike Mann, head of NASA's 
Integrated Financial Manage- 
ment Program. That’s in con- 
trast to the monolithic $186 
million management system 
from KPMG Peat Marwick 
LLP (now BearingPoint Inc.) 
that NASA scrapped in 1999. 

Moreover, the NASA in- 





spector general early last year 
criticized the agency for poor 
IT security procedures, and 
NASA systems have been re- 
peatedly hacked. Last August, 
for example, a hacker man- 
aged to obtain de- 
sign documents 
pertaining to the 
next generation of 
reusable space ve- 
hicles [QuickLink 
32042]. 

But NASA Acting CIO Paul 
A. Strassmann, who took the 
post last year, said the agency 
has made “remarkable prog- 
ress.” For instance, NASA’s 
root server, one of the 13 
servers worldwide that man- 
age the Domain Name System, 
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was one of only five to survive 
October’s massive denial-of- 
service attack. The recent 
Slammer attack affected fewer 
than 40 of NASA's thousands 
of servers, and they were im- 
mediately identified and iso- 
lated, Strassmann said. 
Although NASA is just 
catching up to private compa- 
nies in modernizing 
business systems, 
it’s playing a lead 
role in the develop- 
ment of highly de- 
pendable systems — 
software that toler- 


| ates hardware faults and secu- 


| 
| 
| 
| 


rity problems. 

NASA has a history of lead- 
ing in this area, but after the 
1999 Mars Polar Lander fail- 
ure, the agency knew it could 
benefit from private help, said 
Henry McDonald, who at the 


A Message From 
NASA’s Acting CIO 


Just hours after the Columbia 
disaster, NASA Acting CIO 
Paul A. Strassmann, a former 
Computerworld columnist, 
conveyed this message to 
Computerworld editor in 
chief Maryfran Johnson: 

The NASA information 
systems family of more than 
10,000 professionals and 
close to 15% of the total 
workforce are mourning 
for the loss of seven of our 
brave explorers. 

To be a systems profes- 
sional in NASA is 
more than just an 
occupation — it is 
a vocation with 
knowledge that 
our computers, 
networks and data 
are essential to 
pursue science 
and exploration to 
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improve life on Earth, to ex- 
tend life beyond our planet 
and to find life beyond. We 
are dedicated to do work 
that only NASA can do. 
NASA has just submitted 
to the president a plan in 
which information tech- 
nologies are highlighted as 
the enabling means to make 
NASA missions feasible. 
The loss of seven members 
of our family will only re- 
inforce our commitment to 
deliver capabilities that are 
unmatched any- 
where for safety, 
reliability and se- 
curity. Those will 
be our best contri- 
butions in memo- 
ries of Rick, Bill, 
Michael, Kalpana, 
David, Laurel and 
Ilan. B 





time headed the NASA Ames 
Research Center at Moffett 
Field in California. 
McDonald last year spear- 
headed a $23 million depend- 
able computing program in 
collaboration with Carnegie 


Mellon University. Pittsburgh- 
based Carnegie Mellon, a 
leader in the effort to improve 
software dependability, last 


| month established a West 


Coast campus at Moffett Field. 
The dependable computing 
initiative may ultimately help 
banks, hospitals and critical 
industries. “There are many, 
many applications that would 


| benefit, and NASA is among 
; those,” said Jan Aikins, chief 
| technologist for information 
| sciences at Ames. D 
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Cutbacks 


gineering, were not sufficient- 
ly staffed by qualified work- 
ers,” according to the GAO 
report, titled “Space Shuttle 
Safety.” 

One area of particular con- 
cern continues to be NASA's 
verification and validation 
(V&V) process. 

Prior to the Columbia disas- 
ter, the GAO and the National 
Research Council criticized 
NASA for not using indepen- 
dent third parties to verify and 
validate software components 
critical to the safe operation of 
the space shuttle. As a result, 
NASA immediately stepped 
up its software V&V program, 
said Wil Williams, a spokes- 
man for San Diego-based Ti- 
tan Systems Corp. Titan, since 
2001, has been responsible for 
testing commercial software 
for both the shuttle and 
ground systems. 

But the comprehensiveness 
of Titan’s work is unclear. 
Williams said Titan conducts 
V&V on contractor-produced 
software on “selected systems 
determined by NASA.” 

Donna Shirley, former man- 
ager of NASA's Mars Explo- 
ration Program and the team 


that built the Sojourner micro- | 


rover, said third-party soft- 
ware validation was a hotly 
debated issue at the agency, 
but the decision may have 
come down to cost. 

“For the reviewers to know 
enough about the systems 
they are reviewing to be use- 
ful, there is a considerable 
cost of education,” said 





Shirley. “The shuttle software 
is so specialized that you 
would have to completely du- 
plicate the shuttle computer 


| systems for V&V to work. 
| That would be incredibly ex- 


pensive.” 

NASA officials were unable 
to comment on the issue by 
press time. 


Lesson Unlearned 


Diane Vaughan, a sociology 
professor at Boston College 


| who has written extensively 


about NASA technology and 
the role it played in the 1986 
space shuttle Challenger disas- 


| ter, said that tragedy failed to 


| 


| 





compel NASA to bolster its 
workforce. 
“At the time of the Chal- 


| lenger disaster, NASA was 


plagued by an inadequate bud- 
get and work cutbacks,” said 
Vaughan. “When [previous 
NASA administrator] Dan 
Goldin came in after the Chal- 
lenger disaster, his mantra was 
‘faster, cheaper, better. And 
cheaper was very important.” 
Mike Mann, head of NASA's 
Integrated Financial Manage- 


| ment Program, an agencywide 


IT re-engineering project, said 


| various divisions have been 
| ‘ . . ~ 
downsized “significantly” over 


the past five years — any- 
where from 25% to 40%. 

“New tools were supposed 
to be one of the offsets to that 
reduction,” Mann said, refer- 
ring to enterprise systems. “We 
took the reductions because 
we were mandated to, and we 
didn’t provide them with the 
new tools,” he added. D 


Reporter Patrick Thibodeau 


| contributed to this story. 
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AT DEADLINE 


Microsoft Releases 
Slammer Tools 


Microsoft Corp. made available 
prerelease versions of three soft- 
ware tools designed to help IT 
managers find systems vulnera- 
ble to the Slammer worm, which 
used a patched security hole in 
Microsoft’s SQL Server 2000 
database to cause widespread 
disruptions to the Internet last 
month. Microsoft said the tools 
are still under development and 
are being provided “as is.” 


Bank to Cut IT, 


Back-Office Jobs 


Bank of America Corp. said it 
will cut about 1,000 IT and back- 
office operations jobs by the end 
of March as part of an effort to 
cut costs. The Charlotte, N.C.- 
based bank didn’t break down 
the planned cuts but said IT 
won't be hit as hard as back-of- 
fice functions such as check 
processing. Its combined Tech- 
nology and Operations division 
currently has 22,000 workers. 


Insurer Picks Perot 
For Outsourcing 


Perot Systems Corp. in Plano, 
Texas, said it’s negotiating a 
10-year deal to manage IT and 
back-office business process 
operations at Blue Cross & Blue 
Shield of Rhode Island. About 
600 of the Providence-based in- 
surer’s 1,740 workers will be of- 
fered jobs at Perot. The contract 
is expected to be worth at least 
$450 million, Perot said. 


EDS Says Profit, 
Sales Down in Q4 


Plano-based Electronic Data 
Systems Corp. reported net in- 
come of $360 million for the 
fourth quarter, down 11% from 
the year-earlier total of $405 
million. Revenue dropped 5% to 
$5.5 billion, down from $5.8 bil- 
lion. The IT services firm said it 
expects another year-over-year 
revenue decline this quarter. 


NEWS 


MARK HALL #®ON THE MARK 


- Teradata Steals Oracle's 


Data Mart Users... 


...in a consolidation program. And Oracle Corp. has taken a bit of re- 
venge. Teradata, a division of Dayton, Ohio-based NCR Corp., this 
week is announcing that it has successfully migrated more than 400 
data marts into a few dozen Teradata data warehouses. And “more than 
75% of the data marts are Oracle,” crows Vickie Farrell, vice president of 
Teradata warehouse marketing. Her company has put Oracle data 
marts in its crosshairs, developing technology training programs for 


Oracle users and specific data migration 
tools for Oracle lli and wooing Oracle 
users at the annual conference run by the 
International Oracle Users Group 
(IOUG) for the past two years. Farrell 
said Teradata had already paid for booth 
space at this coming April’s event, but 
just last week heard that Oracle had asked 
the IOUG to refund its competitor’s money and 


packed with 42 256GB ATA disk drives. 
The fully configured machine gets you 
10.5TB of capacity for a mere $42,000 — 
that’s less than four-tenths of 1 cent per 
megabyte. Lauffin argues that disk-to- 
disk (D2D) products from his company 
and others will kill tape backup technolo- 
gy sooner rather than later. According to 
Steve Kenniston, an analyst at Enterprise 


money from Oracle’s 
users that Teradata 
would rather not get. 

® While on the subject 
of money and consolida- 
tion, by late March, 
Nexsan Technologies 
Inc. will be shipping its 
ATABeast disk vault 
system with plenty of 
capacity and cheap enough 
to replace all of your tape 
backup, nearline and 
online storage systems. 
According to Diamond 
Lauffin, senior executive 
vice president of the 
Woodland Hills, Calif.- 
based company, the 
4U-high device comes 


to ban it from the exhibitor’s arena. That’s 


to- 
morrow will announce eGain Ser- 
vice 6 for call center operations. 
The upgrade adds knowledge- 
guided self-service functions for 
Web customers, improved analyt- 
ome MUR ean-lecMeCa (lee nici 
kit and other goodies. 


CRM service provider S 

; bolsters its Enter- 
prise Edition today with support 
la MWU Lec (csM ee cee U LOR (ote 
vices, added marketing campaign 
ICEL Gre R AW MUPUE tlie 
tools for its self-service customer- 
service portal. 


Storage Group Inc. in Milford, Mass., 


“Nexsan is right on the 


| sweet spot of disk-to- 


disk backup.” Kenniston 
figures that two factors 
keep tape backup systems 
alive against the incursion 
of D2D. First, he says, is 
the high comfort level 
of aging systems admin- 
istrators with tape tech- 
nology. Second, govern- 
ment regulations and 
company policies about 
storing critical data off- 
site. In five years, he 
thinks, any technology, 
political or company 
issue will disappear. 
Along with tape. = But 
will your browser vanish in 


www.computerworld.com 


the future as well? Not in five years, but if 
more vendors follow the path being beat- 
en by SRC Software Inc. in Portland, 
Ore., you'll probably be using it a lot less. 
Now in its 20th year, SRC sells budget 
planning and forecasting tools. Its I-Net 
Budgeting 9.2 product combines propri- 
etary software with Microsoft Excel and 
SQL Server or Oracle databases. Right 
now, says co-founder and Executive Vice 
President Andrew Ferguson, remote 
users access the application through a 
browser running a Java client. But when 
the next version ships sometime in the 
second quarter, users can skip the browser 
and go right to the Web in Excel. So, will 
bean counters soon be surfing the Web 
in Excel? Don’t count on it, says Fergu- 
son. But you know they'll want to. 

= E-commerce sites may want to entice 
you to browse their sites using avatar 
technology from YaPanda Software Corp. 
The recently funded start-up is touting 
that your avatar will make you immortal be- 
cause it can use your image and soon, 
your own voice coupled with a detailed 
knowledge base of your likes, dislikes, 
desires and phobias that can be shared 
when visiting any YaPanda-enabled site. 
While the value of having Steve Ballmer’s 
and Larry Ellison’s avatars scurrying around 
the Web forever is debatable, Anthony 
Carson, CTO and founder of the Chick- 
asha, Okla.-based company, claims that 
e-commerce companies will be able to 
exploit the knowledge bases in each 
avatar for “extremely effective personal- 
ization.” # A less-unnerving way to get 
close to your customers is through CRM. 
But deciding which CRM software is best 
for your company has always been an is- 
sue. On Feb. 19, Bethesda, Md.-based ISM 
Inc. will announce on its Web site the top 
15 CRM packages. In case you didn’t 
know, there are 171 to choose from. Up 
from 166 last year. Now where’s consolida- 

| tion when you need it? » 








Nortel Set for Switch Battle With Cisco 


co is studying the technology. 
Aside from the VPN func- 
tionality, all five Nortel prod- 





BY MATT HAMBLEN 
Nortel Networks Ltd. today 
plans to unveil five new and 
upgraded switches for corpo- 
rate users, a rollout that one 
analyst said should help the 
struggling vendor match offer- 
ings from Cisco Systems Inc. 
in competitive bidding battles. 
Two of the new switches in- 
clude virtual private network 
(VPN) functionality based on 
the Secure Sockets Layer 
(SSL) protocol, and all of the 
devices are focused on provid- 





ing a company’s employees, 
customers and business part- 
ners with secure Internet ac- 
cess to mission-critical appli- 
cations, Nortel officials said. 
The switches are designed 
to support “optimized connec- 
tivity over the Internet,” rath- 
er than application access only 
within corporate intranets, 
said Greg Merritt, vice presi- 
dent of enterprise marketing 
at Nortel. Prices range from 
$7,000 to $32,000; the devices 
start shipping late this month. 





Nortel last fall launched a 
new marketing strategy fo- 
cused on mainstream users, in 
a bid to reduce its reliance on 
sales to telecommunications 
carriers [QuickLink 34057]. 

With today’s rollout, Nortel 
is chasing remote-access busi- 
ness as SSL-based VPNs grow 
in popularity, said Joel Conov- 
er, an analyst at Current An- 
alysis Inc. in Sterling, Va. He 
said Nortel is the first large 
vendor to embrace VPNs built 
around SSL but noted that Cis- 





ucts line up with Cisco’s 
switches technologywise, 
Conover said. That could lead 
to price wars between Nortel 
and Cisco, which controls 
two-thirds of the global 
switching market, he said. 

Nortel’s rollout includes 
two Layer 7 switches for appli- 
cation traffic management, in- 
cluding one with SSL support; 
a high-end SSL routing switch; 
a routing switch for midsize 
users; and a data center aggre- 
gation device. D 
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Windows XP Java 
Ruling Put on Hold 


A federal appeals court in Rich- 
mond, Va., issued a stay order 
putting on hold a lower-court rul- 
ing that would require Microsoft 
Corp. to start offering Sun Mi- 
crosystems !nc.’s Java software 
with Windows XP by early June. 
The appeals court’s decision 
came just hours after Microsoft 
detailed the steps it planned to 
take to comply with the ruling in 
an antitrust lawsuit filed by Sun. 


Microsoft Files 
Sendo Countersuit 


In another case, Microsoft filed 
a countersuit against Sendo Ltd., 
a Birmingham, England-based 
mobile phone maker that in De- 
cember charged the software 
vendor with stealing its intellec- 
tual property. Microsoft denied 
the allegation and claimed that 
Sendo broke a mobile phone de- 
velopment contract between the 
two companies. 


Cisco Says Profits 
Up, Sales Down 


Cisco Systems Inc. reported 
$991 million in profits for its sec- 
ond quarter, which ended Dec. 
31, up 50% from $660 millien in 
the same quarter last year. But 
revenue fell 2% to $4.7 billion, 
and Cisco CEO John Chambers 
said users are slowing down 
buying decisions because of con- 
tinued economic concerns. Cus- 
tomers are even more cautious 
than they were three months 
ago, Chambers added. 


Short Takes 


SAP AG said Hasso Plattner, its 
co-chairman and CEO, has 
stepped away from daily opera- 
tions and handed over software 
development to Shai Agassi, who 
had been in charge of new tech- 
nology areas. . .. COMPUTER AS- 
SOCIATES INTERNATIONAL INC. 
said it bought Netreon Inc., a 
Mountain View, Calif.-based de- 
veloper of storage software. 


Mass rollout includes blade servers, 
12-CPU system, virtualization software 





BY JAIKUMAR VIJAYAN 


UN MICROSYSTEMS Inc. 
today will announce a 
slew of hardware and 
software products 
aimed at lowering technology 
ownership costs and reducing 
complexity for users. The 
mass rollout also heralds a 


| fresh assault by Sun on the 


low end of the server market. 
The products are coming 

from several different busi- 

ness units at Sun and include a 


| line of blade servers based on 


a mix of Intel Corp.’s chips 
and Sun’s own UltraSPARC 
processors. Sun officials last 


| week said the company will 


also unveil blade server virtu- 
alization software, a 12-proces- 
sor midrange system and CPU 


| upgrades for its high-end 
| servers (see chart). 


The agenda also includes 


The virtualization software for 
Sun's new blade servers is only 
the first in a series of products 
and services that the company 
plans to roll out this year as 
part of its Ni data center re- 
source management strategy, 
according to Yael Zheng, a di- 
rector in Sun's Ni business 
group. 

In the second half of the 
year, Sun will release an enter- 
prise version of the virtualiza- 
tion software that will let IT 
managers pool and allocate 
various computing resources, 
Zheng said. Like the blade 
server release, the enterprise 
edition will be based on tech- 
nology Sun bought in Novem- 
ber as part of its acquisition of 
Fremont, Calif.-based Terra- 
spring Inc. 

Sun is also working to deliv- 





er storage virtualization capa- 





price cuts that will reduce the 
cost of some high-end systems 
by as much as 35% and the ad- 
dition of services aimed at 
helping users implement Sun’s 
new NI data center resource- 
optimization technologies. 


On the Offensive 
The laundry list of announce- 
ments comes at a time when 
Sun, like its major server ri- 
vals, is trying to jump-start a 
business that has been slowed 
by the sluggish economy. 
“They’re trying to find new 
spots where they can make a 
few bucks while doing what 
they need to do to push their 
existing products out the 
door,” said Charles King, an 
analyst at The Sageza Group 
Inc. in Mountain View, Calif. 
Andy Ingram, a marketing 
vice president at Sun, said the 


N1 Strategy Starts to Take Shape 


bilities using technologies ini- 
tially developed by Pirus Net- 
works Inc., an Acton, Mass., 
company that Sun also pur- 
chased in November. 

Atlanta-based Cingular Wire- 
less is one of the early users pi- 
lot-testing N1 technologies, 
Zheng said. Under a multiphase 
implementation plan, she said, 
Cingular plans to use NI soft- 
ware to pool a mix of computing 
and storage resources in a bid 
to reduce data center complexi- 
ty and costs. Cingular will detail 
its N1 implementation plans as 
part of today’s rollout. 

Sun will also detail new N1- 
related services, including an 
$80,000 architecture assess- 
ment service aimed at helping 
companies figure out the tran- 
sition requirements for using N1 
tools in their data centers. 

~ Jaikumar Vijayan 





Sun Technology ‘Targets 
Low-End Server Market 


product launch is designed to 
show that the company can 
deliver on the NI vision with 
technology that reduces costs, 
complexity and the time it 


| takes to get a return on invest- 


ment. Sun also wants to signal 
that it “is committed to com- 
peting in the low-end market 
really aggressively,” he added. 

The Sun Fire B1600 Blade 
Platform technology will lead 
Sun’s charge at the low end. 
Although Sun is behind its top 
rivals in shipping blade serv- 
ers, the B1600 devices offer 
enough differentiation to at- 
tract attention from users, said 
James Garden, an analyst at 
Technology Business Research 
Inc. in Hampton, N.H. 

Sun is the first vendor to let 
users put blade devices based 
on different processors in the 
same chassis, Garden said. The 
new servers also are the first 
hardware offered by Sun with 
support for NI virtualization 
software that’s designed to let 
IT managers quickly configure 
blade server farms. 

Later this year, Sun said it 
will add specialized blade 
servers for IT security and 
content load-balancing uses. 

Such capabilities should ad- 
dress some of the scaling and 
IT resource-utilization chal- 
lenges users face when deal- 
ing with Web-based applica- 
tions, said Craig Richardson, 
assistant vice president of 
hosting at Telus Corp.’s Busi- 
ness Solutions unit in Vancou- 
ver, British Columbia. 

Telus is Canada’s second- 
largest telecommunications 
company and one of Sun’s 
biggest customers in that 
country. Richardson said the 
new blade servers will let 
Telus offer more efficient per- 
formance-scaling options to its 
large customers. And the sup- 
port for putting both Intel and 
UltraSPARC chips in one box 
gives lower-end users more 
technology choices, he said. 

The 12-CPU V1280 rack- 
optimized Unix server will 





Product Push 


Sun plans to announce the 
following technologies: 
SUN FIRE Vi280 LOW-END 
SERVER: Supports up to 12 
UltraSPARC CPUs and 96GB 
of memory, with prices starting 
at $127,495. 


Po eoeeeeeresessesseresesees 


SUN FIRE B1600 BLADE 
PLATFORM: Supports Intel- and 
UltraSPARC-based blade servers 
in asingle chassis. Intel blades 
will run Solaris and Linux; SPARC 
blades will run only Solaris. 
Prices start at $1,795. 


eee ere reeseseeecreceseoses 


Ni PROVISIONING SERVER 
3.0 BLADES EDITION SOFT- 
WARE: Virtualization tool for 
combining multiple blade servers 
into a shared processing re- 
source that can be allocated to 
different applications as needed. 


SUN STOREDGE 3310: Net- 
work-attached storage device 
optimized for use with the blade 
server technology. Prices start 
at $18,995. 


top Sun’s mass volume prod- 
uct line and was designed 

to be priced competitively 
with similar Wintel boxes, In- 
gram said. 

The College of Oceanic and 
Atmospheric Sciences at Ore- 
gon State University in Cor- 
vallis is using the V1280 to 
consolidate 12 applications 
that were running on different 
servers and operating systems. 
“The system has given us a 
unified way to manage those 
processes,” thereby reducing 
ownership costs, said Chuck 
Sears, manager of research 
computing at the university. 

Sun is also boosting the 
performance of its high-end 
Sun Fire 12K and 15K servers 
by adding a 1.2-GHz Ultra- 
SPARC III chip to the systems. 
In addition, the company is 
dropping prices on some high- 
end configurations. For exam- 
ple, a Sun Fire 12K with four 
CPUs and 8GB of memory 
will now start at $551,987 in- 
stead of the current list price 
of $653,590. B 


INSIDE THE BOX 


For more about servers and other systems, 
go to our Hardware Knowledge Center: 


QuickLink k2200 
www.computerworld.com 
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Sun Says Java Will Support 
Key Web Services Standards 


Delay in J2EE 1.4 
shouldn't affect 
users adversely 
BY CAROL SLIWA 
EVELOPERS who 
hoped that the Java 
2 Platform, Enter- 
prise Edition, would 
support guidelines that seek 
to ensure that Web services 
applications will interoperate 
got some good news last week. 

Sun Microsystems Inc. an- 
nounced that the new 1.4 ver- 
sion of Java 2 Enterprise Edi- 
tion (J2EE) technologies will 
support the Web Services In- 
teroperability Organization’s 
(WS-I) Basic Profile 1.0, a set 
of rules specifying how to im- 
plement key Web services 
specifications. 

Sun officials said support 
for the Basic Profile means 
that J2EE 1.4 will be delayed 
from the first quarter to the 
summer. But the delay is ex- 
pected to impact only leading- 
edge corporate IT shops, since 
many companies have been 
slow to take up new J2EE fea- 
tures and build sophisticated 
Web services applications. 

“Web services are becoming 
very important, but without 
standards support to ensure 
interoperability, they’re worth- 
less,” said a developer at a 
large manufacturing company 
who asked not to be identified. 

“Lately, the application serv- 
er vendors have been deliver- 
ing new versions faster than 
I would like, so the delay in 
the J2EE 1.4 spec is probably 
good news, from my perspec- 
tive,” he said. 


A Step Forward 

Tony Scott, chief technology 
officer at General Motors 
Corp., said J2EE 1.4’s support 
for WS-I’s guidelines is “a sig- 
nificant step in the right direc- 
tion.” He said GM is interested 
in Web services for a number 
of scenarios, including their 





| potential to help the company 


reduce redundant business 
logic. GM is currently doing 
internal pilots and proofs 
of concept. 

Scott said GM expects to 
use both Java and Microsoft 


| Corp.’s .Net development en- 


vironment for Web services, 
so interoperability will be 
important. 


Willing to Wait 


A development director at a 


| large financial services firm 


that has been an early adopter 


| of Web services called the 


J2EE 1.4 delay “unfortunate.” 
“But if this is the fastest 
way to get Web services sup- 
port into the J2EE spec, then 


| so be it,” he said. “We will in 
| the interim go with our own 


solution, but hopefully we 





won't end up with too much 
throwaway code.” 

The development director, 
who requested anonymity, 
said various vendors now sup- 
port Web services, but be- 
cause the technology isn’t part 
of the J2EE specification, the 
vendors do their own exten- 
sions. “We would prefer to 
have it standardized so we 
won't be locked into a particu- 
lar vendor’s implementation,” 
he said. 

Ralph Galantine, a group 
marketing manager for Java 
Web services at Sun, said de- 
velopers can now build Web 
services using the Java appli- 
cation programming interface 
for the XML-based remote 
procedure call, which has 
been made available with a 
number of application servers. 


SAP Users Welcome 


Some say name 
change may help 
-ase confusion 


BY MARC L. SONGINI 

The demise of SAP AG’s my- 
SAP.com brand name didn’t 
provoke much mourning 


| among users of the vendor’s 


business applications last 
week. Several IT managers 
said the mySAP.com concept 
had remained somewhat mys- 
tifying, even after being in 
place for nearly four years. 
“The whole mySAP.com po- 


| sitioning was very confusing, 


particularly to existing SAP 
customers like ourselves,” said 
Tom Ackerman, senior direc- 
tor of business information 
systems at Symbol Technolo- 
gies Inc., a maker of bar-code 
scanners and other handheld 
devices in Holtsville, N-Y. 
Symbol, which uses SAP’s 





‘End of mySAP.com Era 


R/3 enterprise resource plan- 


| ning (ERP) applications, is 


considering installing some of 
the vendor’s newer products, 
such as its portal software. 
But IT staff members are still 
weighing the pros and cons of 
the software licensing scheme 
that was introduced as part of 
the mySAP.com strategy, and 
SAP hasn’t done enough to 
make it clear how the pricing 
works, Ackerman said. 

SAP late last month an- 
nounced that it was changing 
the name of its software prod- 
uct line from mySAP.com to 
mySAP Business Suite. SAP 
America Inc. spokesman Wil- 
liam Wohl said the reason was 
to better reflect the way cor- 
porate users buy software, 
which more and more fre- 
quently is done under a suite 
licensing arrangement. 

Although Wohl said the 
mySAP.com launch in 1999 
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Mark Hapner, Sun’s lead 
architect of J2EE, said it was 
a “big commitment” for ven- 
dors to pledge to build J2EE 
1.4-compliant products that 
tightly conform to WS-I’s 
Basic Profile 1.0. 

Hapner, who is co-leader of 
the J2EE specification under 


was a huge success, several 
users and analysts indicated 
that they found the concept 
to be either confusing or an 
example of marketing hype. 
From the beginning, many 
users weren’t sure if mySAP.- 
com was a new technology, 
a pricing program or just a 
new name. 

“T always felt that mySAP.- 
com was a marketing ploy 
to get everyone to think that 
SAP was Internet-friendly, 
and not a real plan that solved 
problems,” said Eric Bloom, 
vice president of IT at Endo 
Pharmaceuticals Holdings Inc. 
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a | always 


felt that 
mySAP.com was 

a marketing ploy 
to get everyone to 
think that SAP was 
Internet-friendly. 
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ERIC BLOOM, VP OF IT, ENDO 
PHARMACEUTICALS 








the Java Community Process 
(JCP), said the expert group 
charged with evolving J2EE 
was unanimous in its support 
for the WS-I profile. Expert 
groups comprising represen- 
tatives from various vendors 
are responsible for overseeing 
aspects of Java under the JCP, 
which Sun established in 1995 
to develop and revise its Java 
technology. 

Jason Bloomberg, an analyst 
at ZapThink LLC in Waltham, 
Mass., said the decision to 
support WS-I’s basic profile 
shows that Sun is serious 
about its activity in the organi- 
zation. While other major ven- 
dors signed up, Sun resisted 
joining WS-I for months, 
claiming that it deserved sta- 
tus as a founding member. Sun 
is now seeking a seat on the 
WS-I board of directors. 

WS-I’s membership in- 
cludes major vendors such 
as Hewlett-Packard Co., IBM, 
Microsoft and Oracle Corp. 
and enterprise users such as 
Charles Schwab & Co. and 
Merrill Lynch & Co. DB 


in Chadds Ford, Pa. 

MySAP.com “became in- 
creasingly confusing and not 
easily identifiable,” eventually 
turning it into a liability for 
SAP, Bloom added. Even so, 
he said Endo’s R/3 installation 
gives the company good value 
for its price. 

“MySAP.com had its initial 
challenges in what the name 
said about the product,” Wohl 
said, noting that the business 
of enterprise software is “in- 
herently complex.” But he 
begged to differ with the con- 
tinued complaints about my- 
SAP.com, citing the extensive 
adoption of the suite by users. 

SAP’s position got support 
from David Pritchard, ERP 
and customer relationship 
management program manag- 
er at Creo Inc., a supplier of 
digital prepress equipment in 
Vancouver, British Columbia. 
Pritchard said the mySAP.com 
scheme was fairly simple and 
direct. “Right from the outset 
18 months ago, we have had 
simple bundled pricing, which 
includes all the mySAP.com 
functionality,” he said. D 





Nan) intelligence. requires more horsepower 


powerf 


re firs 
} app 
aims 6 00 Os) 


aon 





, ey" 


e 





..a revolutionary new method for providing high availability 


security, scalability and optimized performance for € nterpri 


applications, mobile computing and Web services 


It's the only product that can inspect IP traffic down to the packet 
LU 


payload level. Relevant information can then be extracted-to make 


intelligent decisions for directing traffic according to each application 


mt 


0 


Ci eae ee aan) 
ul offloading, inspection and processing of Layer 7 appticatior ie 
ons that's faster thar an’ t i / awa n then 
solutior I i 
cation sé if Y \ i € i 
OF existing neé 





YOUR WORLD WWW ES OOM.COM 


14 COMPUTERWORLD February 10, 2003 


IBM Beta-lests Virtual 


Microsoft Pulls NT 
4.0 Fix Off Site. . . 


Microsoft Corp. pulied a soft- 
ware patch for Windows NT 4.0 
from its Web site after users 
complained that the security fix 
was crashing the operating sys- 
tem. The company is updating 
the patch, which was released in 
December to plug a hole in the 
WM_TIMER function of Windows. 
There are no problems with simi- 
lar patches for Windows 2000 
and Windows XP, Microsoft said. 


...and Posts New 
Patch For Browser 


Microsoft also issued a new 
patch designed to fix a pair of 
flaws in the cross-domain secu- 
rity tools built into the Internet 
Explorer Web browser. The com- 
pany gave the vulnerabilities a 
“critical” severity rating and said 
attackers could use them to run 
malicious code on vulnerable 
systems. In addition, it released 
a patch for a less-severe hole in 
a file access tool in Windows XP. 


Comdex Owner 
Files for Chapter 11 


Key3Media Group Inc., which 
runs Comdex and other IT con- 
ferences, filed for Chapter 11 
bankruptcy protection as part of 
a deal designed to reduce its 
debt. The Los Angeles-based 
company said it hopes to emerge 
from Chapter 11 within 90 days. 
Thomas Weisel Capital Partners 
LP in San Francisco will provide 
new funding in return for 99% 
ownership of Key3Media. 


Short Takes 


WORLDCOM INC. said it plans to 
cut another 5,000 jobs, primarily 
corporate and administrative po- 
sitions. . .. IBM and AMERICA 
ONLINE INC. said they’re working 
to integrate their corporate in- 
stant messaging products so 
users can communicate without 
having to enter two passwords or 
maintain separate contact lists. 





NEWS 


Database Technology 


Users eye tools for integrating SQL 
databases, other content repositories 





BY MARC L. SONGINI 
BM IS STARTING to beta 
test two software tools 
designed to integrate dis- 
tributed data reposito- 

ries, and several users last 

week said the new technology 
could help them set up virtual 

databases that pull together a 

wide range of information. 

The beta versions of IBM’s 
DB2 Information Integrator 
and DB2 Information Integra- 
tor for Content software are 
the first tangible results of an 
integration initiative, code- 
named Xperanto, that the 
company detailed last month 
[QuickLink 35536]. 

IBM last week said the tools 
will let end users access vari- 
ous SQL databases and other 
content sources through a sin- 
gle query. For instance, DB2 





Information Integrator could 


| be used as part of a call center 


application to extract cus- 
tomer data stored in e-mail 
messages or text files. Com- 
mercial shipments are expect- 
ed to start by year’s end. 


Expanded Data Sources 
At Indiana University’s cam- 
pus in Indianapolis, the life 
sciences department is al- 
ready installing DB2 Informa- 
tion Integrator, said Craig 
Stewart, director of research 
and academic computing. 
The life sciences depart- 
ment currently uses IBM’s 
DiscoveryLink software, a data 
cataloging tool for bioscience 
applications. But DB2 Infor- 
mation Integrator’s native 
XML support will let the 
school’s IT managers expand 


Microsoft Gains Visual 
Studio .Net Momentum 


BY CAROL SLIWA 
Microsoft Corp. this week will 
mark the one-year anniversary 
of its Visual Studio .Net devel- 
opment environment with a 
flurry of announcements in- 
tended to show momentum 
around its latest tools. 
Partners such as 
Borland Software 
Corp. will pitch in 
with new offerings 
designed to work 
with the .Net development 
platform. Borland’s Optimizeit 
for .Net can help developers 
spot memory leaks and other 
potential problems that can 
hinder application perfor- 
mance, said George Paolini, a 
general manager at Borland. 
The Scotts Valley, Calif.- 
based tools vendor acquired 
the Optimizeit technology last 


year from San Jose-based Red- 
line Software Inc., better 
known as VMGear. 

Smaller vendors introducing 
new products at this week’s 
VSLive conference in San Fran- 
cisco include Sanctum Inc. in 
Santa Clara, Calif., which plans 

to announce App- 
Scan Developer 
Edition. That prod- 
uct will integrate 
into Visual Studio 
-Net 2003, which is due for gen- 
eral release in April. AppScan, 
which will sell for $995, tests 
for security defects in code and 
provides descriptions of the 
problems and suggested fixes. 

The level of interest in .Net- 
focused tools remains to be 
seen, since many Microsoft 
developers are just starting 
to switch to the new develop- 








HOW IT WORKS 


IBM said DB2 Information Inte- 
grator could be used in the fol- 
lowing way: 

1) A customer of a financial ser- 
vices firm goes online to seek 
data on the current value of his 
investment portfolio. 


2) The IBM software pulls stock 
ownership information from 
customer account data stored in 
arelational database. 


3)DB2 Information Integrator 
gathers real-time stock quotes 
via a Web services application. 


4) The tool calculates the worth 
of the customer’s holdings and 
presents the data as if it came 
from a single source. 


the types of data sources that 
can be queried, Stewart said. 
Robert Catterall, director of 
strategic technology at Check- 
Free Corp.’s e-commerce divi- 
sion in Norcross, Ga., said he’s 
open to exploring the integra- 


ment environment. 

Brian Siler, a lead program- 
mer analyst at Hilton Hotels 
Corp. in Memphis, said his de- 
velopment group is about to 
enter the coding phase for its 
first .Net project. “The initial 


| skepticism toward [Visual Ba- 


sic] .Net is fading as we start 
to see how some of the new 

language features will make 

our tasks easier,” he said. 

But a major concern is how 
to get the .Net Framework out 
to the company ’s geographi- 
cally dispersed end users. 
Since they’re running Win- 
dows 2000 or XP with nonad- 
ministrative access, they can’t 
install the framework on their 
own, Siler explained. 

In other developer news, 
Borland this week will an- 
nounce its Enterprise Studio 5 
for Java, featuring integrated 
modeling technologies ac- 
quired from TogetherSoft Corp. 
Studio 5, which will sell for 
$6,999, also includes Borland’s 
JBuilder tool, enterprise server 





www.computerworld.com 


tion software, although he has 
no specific plans at this point. 

CheckFree currently stores 
e-mail messages and attach- 
ments directly in IBM’s DB2 
database. But Catterall said the 
electronic billing services 
provider hopes to eventually 
create a virtual database that 
spans various repositories. 

The integration technology 
is being built on top of DB2, 
but Nelson Mattos, director of 
information integration at IBM, 
said users won't have to move 
information out of existing 
repositories or convert data to 
DB2 formats. The software will 
also be tightly coupled with 
IBM’s WebSphere MQ and 
WebSphere Business Integra- 
tion middleware tools, but it 
will work with rival products 
from Microsoft Corp. and oth- 
er companies, Mattos said. 

James Governor, an analyst 
at RedMonk, a consulting firm 
in Hollis, N.H., said installing 
the integration software could 
cause culture shock for some 
database administrators. “Any- 
one in charge of a database 
hates anyone else touching it 
unless permission is given,” 
Governor said. D 


and lightweight data store. 
Last week, BEA Systems Inc. 
released two entry-level ver- 
sions of its WebLogic applica- 
tion server. The Express ver- 
sion can be used for building 
and running Web applications 
that rely on Java Server Pages 
and Java servlets. The Work- 
group Edition is for depart- 
ments with up to 20 users on 
projects that require full Java 2 
Enterprise Edition capabilities. 
A development director at a 
large financial services firm 
who requested anonymity said 
lightweight application servers 
and open-source tools, such as 
the JBoss application server, 
appeal to his company. “Appli- 
cation servers are nearly a com- 
modity item,” he said, “and we 
expect the prices to be falling 
rapidly in the next year or so.” D 


ONLINE RESOURCES 


For more on application development, 
head to our Knowledge Center: 


QuickLink k1100 
www.computerworld.com 
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SAS’ is all you need to know. 


Only SAS provides a high-impact, low-risk way 
to achieve intelligent data warehousing. You can 
extract, transform and load data from any source, 
across any platform, while assuring quality. 
Simplify the way you create and customize reports. 
And deliver a shared version of the truth. To find out 
how top companies reap bottom-line rewards with 
SAS software—by leveraging the value of data 
from corporate systems, e-business channels, the 
supply chain and beyond—-visit us on the Web or call 
toll free 1 866 270 5727. 


www.sas.com/warehouse 
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Directory Links, New User 
for NetWare 


Interface Due 


Novell plans to release upgrade of 
network operating system by midyear 





BY MATT HAMBLEN 
OVELL INC. this 
week will announce 
plans for the next 
upgrade of Net- 
Ware, which will include a 
browser-based user portal, di- 
rectory integration tools and 
an application server that sup- 
ports Web services. 

NetWare 6.5, code-named 
Nakoma, has been in closed 
beta-testing trials for months 
but is due to start a public beta 
period in April and begin ship- 
ping by midyear, said Novell 
product manager Rob Seely 

Seely last week listed 14 
new features plus six improve- 
ments over NetWare 6.0 that 
are being developed as part of 
the upgrade. He focused pri- 
marily on a new Virtual Office 
user interface that combines 
Novell’s previously released 
iFolder and iPrint Web ser- 
vices with new Virtual Team 
and eGuide functions. Virtual | 
Office will let users print, ac- 
cess and manipulate docu- 
ments from a customized Web 
browser and set up virtual 
teams that can collaborate via 
instant messaging, Seely said. 


Directory Integration 
EGuide previously was sold 
separately, but the latest ver- 
sion is being integrated with 
NetWare 6.5. With the help of 
Novell’s DirXML metadirec- 
tory, eGuide will provide con- 
nectors to multiple directo- 
ries, including Novell’s eDi- 
rectory software and Micro- 
soft Corp.’s Active Directory 


Cee eeeeeseseesecesesesesoeesees 


Correction 

Last week's cover story on main- 
frame Linux misidentified the em- 
ployer of John Kogel. The com- 
pany is Candle Corp. in El Segun- 





do, Calif. 


tool and Windows NT do- 
mains, Novell said. End users 
will be able to see all the di- 
rectory information by provid- 
ing a single password via Vir- 
tual Office. 

NetWare 6.5 will also in- 
clude new business continuity, 
Web services and open-source 
features, Seely said. For exam- 
ple, Novell is integrating its 
Java-based Extend application 
server software for use in Web 
services applications. 

Beta tester George Raetzke, 
a senior systems programmer 
at Northern Illinois University 
(NIU) in Dekalb, hailed a 
server consolidation utility 





New Features 


that’s coming in NetWare 6.5. 
Raetzke said he wants to use 
the utility to set up a cluster 
of NetWare servers, which 
would result in a “huge sav- 
ings in space for our labs.” 
NIU, which has 23,000 stu- 
dents, runs NetWare on about 
75 servers but also uses Win- 
dows NT systems for Web 
functions, Raetzke said. He 
added that the school has in- 
stalled both Active Directory 
and Novell Directory Services, 
an earlier version of eDirecto- 
ry. EGuide and DirXML should 
help with integration between 
the directories, he said. 
Another beta tester, Damon 
Dawson, a contractor for Com- 
puter Sciences Corp. who 
works as a network administra- 


| tor at a large federal agency in 





Cincinnati, called the server 
consolidation tool a potential 
“lifesaver” for migrations to 
new server hardware. He also 
said a data backup tool that’s 
due to be included in NetWare 
6.5 will let IT administrators 
back up databases with no 
downtime — and do so during 
the workday instead of over- 
night for easier monitoring. 
John Enck, an analyst at 
Gartner Inc. in Stamford, 
Conn., said Novell appears to 
be doing an “outstanding job” 
of enhancing the Web-based 
user interface that’s in Net- 
Ware 6.0 to create Virtual Of- 
fice. The promised integration 
between eDirectory and Ac- 
tive Directory is also an im- 
portant feature for IT man- 
agers who need to support 
multiple directories, he said. 
Enck said NetWare 6.5 
may help Novell slow the 
software’s market decline but 
only to a point. “It will help 
stop the bleeding, but no non- 
Novell customer will go run- 
ning to 6.5 either,” he said. D 





EMC’s New Arrays 
Get Mixed Reviews 


BY LUCAS MEARIAN 
EMC Corp.’s new high-end 
Symmetrix disk array line was 
lauded by analysts last week 
as a technological advance 
that puts the struggling stor- 
age vendor back in the speeds- 
and-feeds lead. But some IT 
managers were more skeptical 
about the value of the arrays. 
As expected, EMC unveiled 
its Symmetrix DMX800, 
DMX1000 and DMX2000 ar- 
rays and touted their internal 
architecture as being the 
fastest on the market by far 
(QuickLink 36043]. The Direct 
Matrix Architecture technol- 
ogy provides bandwidth of up 
to 64GB/sec., EMC confirmed. 
With list prices ranging 
from $409,000 to $2.5 million, 
the DMX arrays are 15% to 
50% less expensive than ear- 
lier Symmetrix models, EMC 
said. Those prices translate 
into costs of 4 to 8 cents per 
megabyte, according to Ken 





Steinhardt, the company’s di- 
rector of technology analysis. 
“Our objective is to be com- 
petitive,” Steinhardt said. 

But the price/performance 
improvements didn’t wow Joe 
Gottron, CIO at Huntington 
Bancshares Inc. in Columbus, 
Ohio. Gottron has more than 
20TB of capacity on a Sym- 
metrix array he bought last 
year. He said he’s not interest- 
ed in the new line because he 





doesn’t see a solid business 
case for buying the technology. 

Paul Seay, a storage special- 
ist at a large government con- 
tractor on the East Coast, said 
he views the DMX line merely 
as stopgap technology aimed 
at stemming user defections to 
rivals such as IBM and Hitachi 
Data Systems Corp. 

Seay, who manages 48TB 
of storage on IBM’s high-end 
Shark arrays plus data stored 
on EMC’s Clariion midrange 
devices, said he was hoping 
EMC would roll out storage 
management software up- 
grades and increased multi- 
vendor interoperability. 





“I thought EMC was going 
to be a software company, but 
they’re so late to the game that 
I don’t think they’ll be able to 
break in at this point,” he said. 

Seay and Gottron also said 
they’re disappointed that the 
DMX models don’t include 
built-in support for IBM’s 
Ficon mainframe connectivity 
technology, which is support- 
ed on older Symmetrix arrays. 

Steinhardt said IBM is up- 
grading Ficon from 1G bit/sec. 
throughput to 2G bit/sec., so 
EMC saw no reason to link to 
the technology right away. Fi- 
con support is due to be added 
in the third quarter, he said. 

Jim Shaw, CIO at Manage- 
ment Science Associates Inc. 
(MSA) in Pittsburgh, was 
more positive about the DMX 
line. MSA has 30TB of capaci- 
ty on four Symmetrix arrays 
and is testing the DMX800. 
Shaw said he likes the array’s 
modularity because it will let 
him grow his storage capacity. 

Shaw said he also appreci- 
ates the internal bandwidth 
boost. “We’re getting notice- 
ably better performance out of 
the [DMX] system,” he said. D 
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The smartest way to run your network is also the smartest way to run your business. 
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It's a Dell, so you know you're going to save money. But let's talk performance. 
From standard Fast Ethernet to high-speed Gigabit Ethernet over copper or fiber, Dell 
owerConnect switches are designed to offer full wire-speed and non-blocking performance 
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Recent Tolly lab tests confirmed that the Dell PowerConnect 3248 outperformed industry 
leaders by as much as 47%. Plus, the PowerConnect 5224 has been lauded by Jom'’s Hardware 
Guide for its performance and manageability features for the price. PowerConnect switches 
also are highly interoperable and scalable, making them ideal for building a first-time network 
or expanding your existing one. So not only will you get one-of-a-kind Dell performance for less 
but, perhaps more importantly, there'll be fewer headaches toc 
Dell PowerConnect 3248 Outperforms |[TOLLY 
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SuperStack 3 Switch 4400 by up to eo 
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In a time ef economic uncertainty, a sense of caution has surfaced in the IT and 
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= tionality, he said. | recent months [QuickLink 

Sybase Seeks to Secure Mobile Data “There’s a real need to man- | 36045], IDC projects contin- 
age and administer mobile de- | ued growth for software that 

BY MATT HAMBLEN | Forexample, Research In | ing to Drake. XcelleNet Inc. vices, especially the small de- | can manage mobile devices, 
Sybase Inc.’s mobile software | Motion Ltd. offers a data-dele- | and Synchrologic Inc. also sell | vices that are mucheasierto | track hardware inventories 
subsidiary last week an- tion capability for use with its mobile device management lose,” Drake noted. Despite a and automate the distribution 
nounced a security tool that’s BlackBerry handhelds, accord- | tools with “poison pill” func- dip in the sale of handhelds in | of software to end users. D 
designed to let network man- See —— * = = 
agers zap data from lost or 


stolen laptop computers and 8 
Pocket PC handheld devices. St ren h in N um be rs 
The Zap It feature is one of a 
several enhancements that 
Dublin, Calif.-based iAny- 
where Solutions Inc. is adding 
to its Manage Anywhere Stu- 
dio software as part of an up- 
grade. IT managers can con- 
figure the security feature to 
erase sensitive data when sys- 
tems are turned on without 
the proper passwords, accord- 
ing to iAnywhere officials. 
Other new features include 
tools for remotely installing ; 
operating system updates, R EF M E D Y 
providing Web-based help 
Gudchpach aakucime is SERVICE MANAGEMENT SOLUTIONS 
ventories of mobile devices 
and software packages, iAny- 
where said. The Manage Any- 
where Studio 5 upgrade is due 
to ship Feb. 28. 


‘Zap’ Protection 

“We've chained laptops to 
desks, but somebody will 
come along and use a bolt cut- 
ter to take one,” said Ben Bak- 
er, IT manager at PDS Re- 
search Inc., a Louisville, Colo., 
company that coordinates pul- 
monary clinical testing for 
pharmaceutical companies. 


PDS plans to install iAny- sii ; 10,000,000 


Mele av (a6) 
mers would 


where’s upgraded software on 
each new laptop it rolls out. 

A lost laptop that contains 
testing data about a new drug 
being developed by a PDS 
client could be worth millions 
of dollars to rival pharmaceu- 
tical makers, Baker said. IT | 
staffers will set the Zap It fea- Remedy is the leader in Service Management solutions. Our numbers speak for themselves. 
ture to delete PDS’s custom | 
software and all the data con- 
nected to it if a user doesn’t 
connect to the company’s net- 
work within a prescribed peri- 
od of time. 

Features similar to Zap It 
have been added to a variety 
of products sold by iAny- 


where’s competitors during www.remedy.com/strength Fd Remedy ? 


the past six months or so, said or call us at 1.888.294.5757 


Stephen Drake, an analyst at 
IDC in Framingham, Mass. 


Yet, there are other numbers important to Remedy. Operating cost reductions, improvements in customer 
satisfaction, increased employee productivity, shorter time to value—the bottom-line numbers you will achieve 
by using Remedy’s out-of-box best practice applications to automate service management processes. 


Your success depends on those numbers. Remedy delivers them. 
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Securing Credibility 


HE SLAMMER WORM was aptly named. 

The critical fallout from the latest in a 

string of debilitating viruses slammed 

vendors and users alike, and rightly so. 

Users took a hit for not heeding endless 
warnings about the need to keep abreast of security 
patches, and vendors got smacked for shipping crap- 
py software in the first place. The industry’s credi- 
bility is on the line, and little wonder. 


Slammer, if you’ve 
been hibernating, is a 
self-propagating worm 
that attacked a known 
and readily fixable vul- 
nerability in Microsoft 
SQL 2000 Web servers 
on Jan. 25, spreading 
some 250 times faster 
than Code Red, according 
to a study released last 
week by a coalition of se- 
curity experts. 

Ever more advanced : . 
malicious programs, and the malcon- 
tents and showoffs who construct 
them, are going to continue to prolif- 
erate. That’s a given, especially since 
the number of software vulnerabili- 
ties found in 2002 (2,524) rose 82% 
over 2001, according to security ven- 
dor Symantec’s biannual “Incident 
Security Threat Report,” which was 
released last week. Worse is the ac- 
celerating pace of new, smarter 
viruses — 7,000 in the past year 
[QuickLink 35428]. 

It should be clear that companies 
on both sides of the fence need to 
stop dithering and engage in some 
constructive action. And it should be 
obvious by now that IT users must 
employ preemptive measures and 
have disaster-response policies in 
place, ready to go at the first whiff of 
another viral onslaught. 

You'd think that by now the long, 
sad history of vendor security mis- 
steps would be over. But it’s become 
even more apparent that you can’t 
rely on your software vendors. De- 
spite Microsoft’s bravado of a year 





ago, when it claimed that 
it was going to “lead the 
industry to a whole new 
level of trustworthiness in 
computing,” it hasn’t got- 
ten very far. in fact, the 
company kicked off the 
year with several security 
alerts. It’s alerts like 
these, and the ensuing pa- 
rade of patches, that are 
driving users nuts. 

Last week’s Page One 
story “Unprepared Firms 


Slammed” [QuickLink 36044] showed 


that it’s difficult for strapped IT de- 
partments to keep up, due to a lack 
of time, money or staff. And it does- 
n’t help when the patches come 
packing their own peck of trouble. 
Last week, Microsoft had to pull a 
security patch for Windows NT 4.0 





because it was crashing the operat- 
ing system it was supposed to be 
helping. But don’t think that Micro- 
soft is alone in bedeviling IT in this 
manner. It isn’t. 

It seems everyone has something 
to prove on the security front. We’re 
hearing rumblings of an IT credibili- 
ty gap, usually pegged to Y2k expen- 
ditures, dot-com blunders and un- 


| realized ROI from huge projects like 


ERP. You could argue that the securi- 
ty issue casts a longer shadow over 
IT’s effectiveness. It’s certainly more 
immediate, and its impact is felt 
from the boardroom to the desktop. 
Yet no one group can stand alone 
when it comes to combating cyber- 
crime and boosting its credibility. IT 
needs better products, fewer fixes 
and easier-to-use patches from ven- 
dors. Vendors need IT to use the 
tools that are already available and 
to close the door behind known vul- 
nerabilities. The government needs 
IT to report attacks, formulate and 
enact security policies, and join the 
effort to demand certification stan- 
dards for security products. 
Companies absolutely need Inter- 
net access and reliable systems. All 
parties must act in synchronicity. 
Unless we all work together, we may 
find ourselves caught up in a viral 


| spiral, hardly able to work at all. D 
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PlaceWare 
Deal Still 
Leaves Gap 


ICROSOFT’S pur- 
chase of PlaceWare 
Inc. is an effort to 


supplement the company’s 
meager offerings in collaboration 
technology. But it doesn’t answer the 
question about how Microsoft will sat- 
isfy the on-premise, enterprisewide 
collaboration needs of Windows users. 
Place Ware is a hosted service for 
which users pay a fee. 

For those seeking an on-premise op- 
tion, IBM has already spread out its 
road map to move customers from 
Domino to WebSphere, DB2 and Tivoli. 

Providing on-premise technology 
makes sense for some users because it 
can push the cost down to pennies per 
minute. Most collab- 
oration technology 
decisions are made at 
the departmental lev- 
el. But by having a 
single, in-house stan- 
dard, businesses can 
more effectively use 
their corporate pur- 
chasing power. 

Sure, some compa- 
nies are better off 
renting collaboration 
tools on an ad hoc 
basis from WebEx, Place Ware, Rain- 
dance and others because of relatively 
low usage levels or because those ser- 
vices don’t need to integrate with cor- 
porate applications. For them, there’s 
little value in an enterprise-level col- 
laboration system. 

But for those that are plotting an 
overall collaboration strategy (for ex- 
ample, to integrate in-house applica- 
tions), bolting that software to a host- 
ed collaboration service such as Place- 
Ware isn’t the most elegant solution. 
Building links from a CRM or ERP ap- 
plication or a database to a collabora- 
tion technology is going to be a 
headache without, for example, con- 
trolling upgrades. 

That’s why Microsoft’s purchase 
falls short of articulating a complete 
collaboration strategy. It also doesn’t 
address Microsoft’s desire to embed 
collaboration tools using XML (and 
probably SOAP, UDDI and WSDL) 
into .Net, which would include capa- 
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Find the World’s Best 
Storage Solutions and Education! 


Register today to attend the world’s 
premier event on: 


NETWORKING ° Storage Management 


V ep | ¢ Enterprise Infrastructure 


April 14-17, a. 
JW Marriott Desert Ridge Resort 
Phoenix, Avtzona 


COMPUTERWORLD =SNIA 


Are you wrestling with storage and data management in today’s 
challenging business climate? Is your infrastructure under 
increased pressure? Are business continuity worries keeping you 
up at night? Then attend Storage Networking World (SNW), the 
only conference where IT Managers and professionals get an 


See and Hear Regis McKenna 


Regis McKenna 


Renowned Technology Advisor, 
Venture Capitalist and Author 


New Technologies and Industry Standards: 
Separating Hype from Reality 


Find Out How ClOs Are Coping 


Ulrich Seif 
EvP & ClO 
National Semiconductor 


Steve Romaine 
Chief Architect, The Hartford 


See the World’s Best 


Storage Interoperability 
and aioe Demo 


In our world-class, acclaimed 
| seaeaieatiie and Solutions Demo, 
you'll not only see real-life 
configurations, you'll tour the Demo 
area and discuss with experts the 

' technical configurations and how 
they may apply to your business. 


Business Continuity 


Data Management and Security 
Emerging Technologies 


SNIA-endorsed education, a hand's on view of the world’s only 
SNIA-sanctioned Interoperability and Solutions Demo, and 
access to legions of peers, experts and solutions you won't find 
anywhere else. 


Hear Real-World 
User Implementation 
Case Studies 


At Storage Networking World, 

you'll see IT managers and pro- 

fessionals describe how they 

implemented key storage tech- 

nologies in today’s world. You'll learn from their valuable 
lessons and have an opportunity to network with them. 


Get an Education 
Endorsed by the 
SNIA 


¢ A Primer delivering basic stor- 
age concepts, terminology and 
business applications. 


¢ Exclusive SNIA-produced and Delivered Tutorial Sessions, 
offering immediately implementable tips, tools and tech- 
niques that cover: 


* Disaster Recovery, Backup/Restore and High Availability 
* Securing and Managing Your Storage Networks 
¢ Networking for Storage Managers, Virtualization, 

and IP-based Storage Technology 


See the World’s Largest Storage 
Industry Expo 


You'll participate in live demonstra- 
tions and meet exhibiting companies 
specializing in the latest data 
management and storage networking 
products and services. 


For more information and to register, 
visit WWw.snwusa.com/expo or call 1-800-883-9090 


(1-508-820-8159) 
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Travel and Accommodations | Pre-Conference Golf Ou 


conference where 
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IDG Travel is the official travel compa- ~ i 
ny for Storage Networking World. They .% IDG Complimentary ered 
are your one-stop shop for exclusive Golf Outing Bie c0 Cau 
discounted rates on for Registered Elen) em 
hotel accommodations. iT U 

Sers P 


To reserve your accommodations: 
visit www.etcentral.com OR call 1-800-340-2262 
(or 1-508-820-8159) 


The Pre-Conference Golf 

Outing at The Palmer Course at Wildfire, located at the 
JW Marriott Desert Ridge Resort, is complimentary ($165 
value) for registered IT End-Users (other participants, 
including sponsors and vendors, may play on an “as avail- 
able” basis and are responsible for all applicable golf 
outing expenses). 


For details: contact Chris Leger at 1-508-820-8277 
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Application for Conference Registration 


QUESTIONS? 
¢ Call: our Customer Service Line at 800-883-9090 
© Email: snwreg@computerworld.com 


CODE: EXPO 


Pre-Registration On-Site Registration 


1 Ap 


Q $1,095 


Q) $5,000 


etc. from our conferenct 
purchasing influence within 


? Please call 1-800-883-9090 


ndors (as well as venture capitalists, 
lutes a “non-sponsoring vendor” 


Registration Information: (This section must be completed in order to process your application) 


First Name 
Title: 

Street Address 
City: 

Country 

Fax Number: 


Badge Name: 


Would you like to receive information about playing in the golf outing on Monday, April 14th (PM)? 
Or Ox 


Piease indicate your preferred conference shirt size: Ss CJM 


Attendee Profile: (This section must be ¢ ompleted in order 


SECTION A - FOR IT END-USERS ONLY 


Your Business/Industry: eS 

: ; ON 
Employees in your entire 
Company: 


Cococ OCOoOoCUcCO 


Estimated annual revenue 


Your Job Title/Function: of your entire company: 


Annual company IT budget 
(AIL IT products and services): 
Select item below that 0 M 

most closely matches your $50 M 

involvement in IT decisions: 


bee COCLL 


SECTION B - FOR IT VENDORS ONLY 


Your Business/Industry: 


Middle Initial 


Company 


Phone Number 


Last Name: 


Suite, Apt., etc.: 
State/Prov: 


Zip/Postal Code: 


Extension: 


E-Mail Address: 


Q) Special Services Required? (p 


QOxxt O Xxxx1 


to process your application) 


Annual company IT budget 
(Storage products and services): 


Your personal IT spending 
authority (All IT products 
and services): 


Your personal IT spending 
authority (Storage products 
and services): 


Your Job Title/Function: 


Qves ONo 


| Payment Method 


Q Check Enclosed (checks must be received by 4/4 
Make | t r| 


Mail to: Ce 


MA 01701) 


N Oo ath, Fran 


Q) American Express QO VISA QO MasterCard 


Account Number 


xpiration Date 
Card Holder Name 


ture of Card Holder 


Cancellation Policy 


Computerworld reserves the right to limit and/or refuse 
any registration for any reason. 


Schedule of Conference Events 
Monday, April 14, 2003 
=: bre-Confersnce Networking Bacéptio 


Tuesday, April 15, 2003 
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bilities such as Passport. Furthermore, 
the company has yet to release an in- 
stant messaging package as part of 
Windows Server (that’s slated for the 
third quarter), key to an integrated 
collaboration system. 

According to Mike Gotta, an analyst 
at Meta Group, there also are some 
architecture challenges to the Place- 
Ware deal. Microsoft will have to port 
Place Ware to the Windows Server op- 
erating system (it’s now based on the 
Java/Sun platform and isn’t .Net-certi- 
fied). All this has to happen before in- 
tegration into portals, project manage- 
ment applications, the Office suite, 
Windows Messenger and Exchange 
can take place. Plus, the purchase 
doesn’t clarify plans for the Real Time 
Communications component of Win- 
dows Server due later this year. 

Gotta hopes Microsoft will spell out 
how on-premise conferencing and col- 
laboration within Windows and with 
real Web services components will 
take place. 

Until then, enterprise customers 
will be kept waiting. Or go to IBM. DB 


DAVID FOOTE 


IT Job 


OPINION 





shifting business needs. 
So-called permanent lay- 
offs are a serious employ- 
ment trend, appearing not 
just in our research but also 
in a report issued in August 
by the Bureau of Labor Sta- 
tistics that confirmed the 
beginnings of structural 
downsizing more than a 
decade ago. If that’s not am- 
ple reason for IT workers to 
be concerned, consider the 
thousands of manufacturing 
and aerospace jobs that van- 
ished to foreign lands in the 
last century. 
As for IT compensation, 
2002 was a tough year, but it had its 
bright spots. Overall, base salaries for 
85 IT positions surveyed in our re- 
search declined by an average of 2.8%, 
and cash bonuses paid out fell by 32%. 
Bucking the downward trend, 
salaries for corporate security posi- 
tions increased by an average of 5.5% 
in 2002, with total compensation up 
3.3% as bonuses declined by a less dra- 
matic 9.1%. Moreover, premium pay for 
security certification bonuses has 
risen 11.3% in value in 2002 and an 
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even more impressive 31% 
over the past two years, 
thanks to several technical 
niche certifications from 
the SANS Institute and re- 
newed interest in the man- 
agement-oriented Certified 
Information Systems Secu- 
rity Professional and Certi- 
fied Information Systems 
Auditor certifications: All 
registered between 11% and 
38% growth last year. 
Certifications are more 
popular, partly for validat- 
ing training expenses and 
pay adjustments with to- 
day's cost-conscious exec- 
utives. Median premium pay for 54 
technical certifications has grown a 
surprising 0.5% over the past two 
dreadful years (even with a modest 
3.3% decline in 2002), led not just by 
security but also by solid perfor- 
mances last year by certifications in 
project management, Linux (up 17%), 
and networking (most notably Nov- 
ell’s Certified Novell Engineer and 
Master Certified Novell Engineer). 
Also hot: Voice over IP, Wireless 
Markup Language (WML), DB2, 





VoiceXML and SAP’s Advanced Busi- 
ness Application Programming lan- 
guage skills all grew in value in 2002. 
Highest paying? Rapid application de- 
velopment/extreme programming, 
XML, SQL Server, WML and Oracle 
database skills. 

Hot job segments for 2003, according 
to our research, are security, network 
management, enterprise infrastructure 
and architecture, database, SAP-related 
development, project management, and 
project-based work implementing cus- 
tomer-facing systems and processes. 

Want to know what accounts most 


for IT workers’ current predicaments? 


Career choices they made long before 
the recession. Those choosing tech- 
nology specializations got lucky if 
they picked the right vendor or niche 
technology. While missing out on the 
many benefits specialists enjoyed in 
the boom times, those who took the 
generalist path have generally adapted 


| better to today’s conditions and have 


the most employment opportunities. D 





| WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site: 
www.computerworld.com/columns 
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‘Trends Yield 
Surprises 


N HIS FIRST State of the 
Union speech, President 
Bush challenged Ameri- 


cans to consider some form of 
government service during their life- 
times. I don’t necessarily think he had 
public-sector IT jobs in mind, but pri- 
vate-sector IT workers are more ag- 
gressively seeking jobs in federal and 
state government, according to my 
firm’s latest quarterly research, which 
is compiled from continual tracking of 
nearly 32,000 IT professionals, 36% of 
whom work in organizations with 
$500 million or more in revenue or 

$3 billion-plus in total assets. 

Can you blame disaffected, stressed- 
out workers with worthless stock op- 
tions for suddenly wanting the more 
relaxed work environment, better job 
security, fully paid family-friendly 
benefits and shorter hours of the pub- 
lic sector? Especially those who risk 
losing their jobs permanently to off- 
shore technicians, contractors and 
part-time workers who can work more 
cheaply and provide IT executives 
greater flexibility in responding to 





Offshore Threats 


HE OFFSHORE outsourcing in- 

dustry for programming and 
development continues to grow 
{QuickLinks 35866 and 36001), 
and the latest phase is the most 
dangerous of all. People in IT man- 
agement today got their start as 
programmers, database analysts or 
perhaps even at the lowly help 
desk, but now those jobs are being 
sent overseas. While this may ap- 
pear sound in the short term, the 
long-term repercussions of this 
brain drain will manifest themselves 
in an evaporation of our competi- 
tive advantages. 

| am all for the H-1B program, 

which brings skilled, educated peo- 
ple to our shores. But | fear we are 
giving away too much of our future 
by sending skilled jobs overseas. 
Terry Shea 
Director of IS, The Sporting 
News, St. Louis, 
tshea@sportingnews.com 


AVID FOOTE’S prediction fails 

to take into account the new 
emphasis on IT and software secu- 
rity due to concerns regarding ter- 
rorism and cyber-based attacks. 


Using companies external to the 
U.S. limits your ability to screen 
who will work on code. Any appli- 
cation on a network has the poten- 
tial for trapdoors, Trojan horses or 
remote software agents. If you keep 


have control of who works on what. 
Thom Campbell 

Senior developer, St. Peters- 
burg, Fla. 


| Defects, Not Bugs 


READ ONCE that saying software 
has bugs is a way for the soft- 
ware developer to distance himself 
from responsibility [“Biting Back,” 

QuickLink 35204]. The word bug 
implies that it crawled into the pro- 

gram somehow, it almost sounds 
cute. Use the term defect and see 
how much harder it is to trivialize it. 
| Itimplies much more strongly that 
something needs to be fixed. 

Lars Sundstrom 

Development manager, 


| Melbourne, Australia 


Remote and Secure 


HE ARTICLE “10 Tips for Beat- 





ing Virus Threats” [QuickLink 


your developers in-house, then you | 





35603] was quick and to the point 
for professionals who may need to 
verify what the rank and file are do- 
ing to keep their company secure. 
One area not touched upon was re- 
mote access. If you allow employ- 
ees to extend their home into your 
network, you need a strong security 
policy that makes employees share 
some of the responsibility and ac- 
countability. For example, this poli- 
cy should state that employees who 
have been granted remote access 
shouldn't turn off automatic virus 
updates. 

Ravila Helen White 

CISSP, Seattle 


.Net Beats Java 


HE INTERVIEW titled “Sun 

Exec: Ruling Will Boost Java” 
[QuickLink 35404] was quite in- 
teresting, but Richard Green was 
way off the mark. He states, “The 
killer feature to date that Net has 
over Java is not the technology. It’s 
not marketing; it’s not tools. It's dis- 
tribution.” 

Sun and the rest of the major 
J2EE 1.3 players (such as BEA 
Systems, IBM, Oracle and Sybase) 
must be cognizant of the fact that 





Microsoft Visual Studio .Net is 
currently the most advanced and 
user-friendly development suite in 


| the industry. 


Case in point: The key J2EE 1.3 
vendors don't currently possess a 
product offering as good as Micro- 
soft Visual Studio .Net in the devel- 
opment tool space, hence the at- 
traction to the Microsoft .Net plat- 
form. Therefore, the key J2EE 1.3 
players should heavily invest and 
promote new development tech- 
nologies such as Eclipse to close 


| the gap with Microsoft 


Russell Ruggiero 
IT research analyst, 
West Windsor, N.J. 


COMPUTERWORLD welcomes 
comments from its readers. Letters 


| will be edited for brevity and clarity. 


They should be addressed to Jamie 
Eckle, letters editor, Computerworld, 
PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701. 
Fax: (508) 879-4843. 

E-mail: letters@computerworld.com. 
Include an address and phone num- 
ber for immediate verification. 


More letters on these and other 
topics are on our Web site: 
computerworld.com/letters 





ROBUST OBJECT DATABASE 


Our post-relational database. 
This is the next wave. 


For your next generation of applications, 
move to the next generation of database technology: 
Caché, the post-relational database. 

What makes Caché “post-relational”? It provides 
developers three integrated data access options which 
can be used simultaneously on the same data: an 
advanced object database, high-performance SQL, 
and rich multidimensional access. 

Because Caché’s architecture is a multi- 
dimensional structure, applications built on it are 
massively scalable and lightning-fast. 

Plus, no mapping is required between object, 
relational, and multidimensional views of data. 

This means huge savings in both development and 
processing time. And, Caché-based applications 
don’t require frequent database administration or 
hardware and middleware upgrades. 


More than just a database system, Caché 
incorporates a powerful Web application develop- 
ment environment that dramatically reduces the 
time to build and modify applications. 

The reliability of Caché is proven every day in 
“life-or-death” applications at hundreds of the largest 
hospitals. Caché is so reliable, it’s the world’s leading 
database in healthcare — and it powers enterprise 
applications in financial services, government and 
many other sectors. 

We are InterSystems, a specialist in database 
technology for 25 years. We provide 24x7 support 


to four million users in 
InterSystems » 


88 countries. Caché is LLL 
available for Windows, tL ( ACHE 
OpenVMS, Linux and LLL . 


major UNIX platforms. Make Applications Faster 


Download a fully-functional version of Caché or request it on CD for free at www.interSystems.com/post-relational 


© 2003 InterSystems Corporation. All rights reserved. interSystems Caché is a registered trademark of InterSystems Corporation. 
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TECHNOLOGY 


Q&A 
IT for the Autobahn 


Claus Hohmann, CTO at Volkswagen’s Autostadt, an 





OPINION 
Getting Out the Crystal Ball 


The future of IT includes a revival 
of interest in the network comput- 


SECURITY MANAGER’S JOURNAL 


FTP Server Offers 
| Key to the Store 


Incidents involving compromised servers at 


automotive theme park where customers can pick 
up vehicles they custom-ordered online, talks about 
the Autostadt’s IT infrastructure and the challenges 
of keeping the complex running. Page 28 


Mathias Thurman’s company show why it’s 
important to have security guidelines for both 
external- and internal-facing servers. Page 34 | 


er and Java, says columnist 
Nicholas Petreley. Page 38 
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IT portfolio management tools apply 
metrics that help analyze and priori- 
tizelT projects, but the products are 
still evolving. By Thomas Hoffman 


SITMANAGERS_ | 
struggle to do | 
more with less, 
the notion of 
managing an or- 
ganization’s IT 
assets like a financial portfolio — 
using a Buy, Hold and Sell ap- 
proach — has caught fire over 
the past 18 months. “We want to 
look at our IT expenditures more 
from a strategic business-value 
basis than from a technical cost 
basis,” says Carl Ascenzo, senior 
vice president and CIO at Blue_ | 
Cross and Blue Shield of 
Massachusetts Inc. in 
Boston. 

Many new IT portfolio 
management tools have 
emerged. Although a handful of 
these packages are sophisticated 
enough for IT managers to ana- 
lyze all of the IT investment op- 
portunities within an organiza- 
tion, many lack maturity and fea- 
tures, acting as little more than 
project management packages on 
steroids. 

“Some tools just aren’t very 
broad or very deep,” says Marnie 
Ross, a Meta Group Inc. analyst 
in Vancouver, British Columbia. 

Ross and other analysts typi- 
cally break the IT portfolio man- 
agement tools market into three 
categories: project management 
tools, which provide rudimenta- 
ry portfolio analysis capabilities; 
complex tools that are adept at 





calculating what-if scenarios for 
IT investments; and enterprise 


| software tools from vendors 


such as PeopleSoft Inc. and Ora- 

cle Corp. that are starting to 

make a foray into the market. 
Project management portfolio 


packages, such as the one from 


ProSight Inc. in Portland, Ore., 
primarily focus on managing in- 
dividual projects or a panoply of 
projects from start to finish. Al- 


| though most of these packages 


integrate well with Microsoft 

Project, they typically provide 
limited portfolio manage- 
ment and analysis capabil- 
ities. “There is a tendency 
[among vendors] to either 
bundle or provide supple- 


| mental services with these pack- 
| ages,” 


says Ascenzo. 
More sophisticated analytical 


tools are offered by vendors such 
| as New York-based United Man- 


agement Technologies Corp. 


| (UMT) and Ann Arbor, Mich.- 
| based Program Planning Profes- 


sionals Inc., also known as 


| Pcubed. UMT and Pcubed each 


combine services and software 
aimed at “figuring out what your 


| processes are and managing your 
| portfolio” by providing action- 


able measurements of variables 


| such as cost, risk and resources 


to help IT organizations maxi- 


| mize their IT investments, says 
| Margo Visitacion, a Giga Infor- 


mation Group Inc. analyst based 


| in Norwalk, Conn. 


While the niche vendors focus 
on project management and IT 
portfolio management capabili- 
ties, enterprise software vendors 
such as PeopleSoft, Oracle and 
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Artemis International 
Solutions Corp. 
Boulder, Colo. 
www.artemispm.com 


Analyzing the Tools 


Meta Group analyst Marnie Ross offers the following assessment of IT portfolio management tools: 


Pacific Edge Software Inc. 
Bellevue, Wash. 
www.pacificedge.com 


ProSight Inc. 
Portland, Ore. 
www.prosight.com 


San Francisco 
www.businessengine.com 





PRODUCT 
PortfolioDirector 


The Edge for IT 


ProSight Portfolios 





PROS 

Strong integration with Micro- 
soft Project client. Excel/ent 
user interface. Good time track- 
ing and reporting and graph- 
generation capabilities. 


Strong in cost estimating, portfolio 
analysis, scenario planning and 
resource allocation. Good reporting 
capabilities with Microsoft Project. 
Includes its own project and re- 
source management tools. 


Interoperates with other products 
such as Business Engine and its 
professional services automation 
capabilities. 





CONS 

The standard product doesn't 
support calculation fields, mak- 
ing it tough to estimate overall 
resource requirements, such as 
the people, time and money 
needed for a project. An option- 
al module adds this function. 


Weak in terms of mapping internal 
workflow processes with the soft- 
ware. But the product allows an 
organization to modify its work 
processes as they mature with its 
internal IT portfolio management 
methodologies. 


ProSight is more of a portfolio 
analysis tool than a portfolio man- 
agement tool. “There's no magic 
to that,” says Ross. 


Business Engine Network 


Strongest in professional services 
automation. Relies heavily on 
Microsoft Project for project man- 
agement functions. Offers good 
support for the IT budgeting 


process across multiple currencies. 


United Management 
Technologies Corp. 
New York 
www.umt.com 


StatFrames Software Suite 


Strong in IT portfolio analysis 
and program management 
arenas, UMT is moving into 
portfolio management. Stat- 
Frames can identify internal 
processes. 





Could do a better job with oppor- 
tunity management, particularly in 
the area of time and resource 
management. 


Lacks asset management 
capabilities. 


Computer Associates International 
Inc. are beginning to make inroads in 
the IT portfolio management space. 

PeopleSoft introduced Project Port- 
folio management capabilities under 
its Enterprise Services Automation 
package in December. It iets customers 
evaluate the performance of a project 
against corporate objectives, says 
Chris Leone, a vice president of prod- 
uct strategy at the Pleasanton, Calif.- 
based company. PeopleSoft’s IT port- 
folio management system is more ad- 
vanced than those of Oracle and CA. 
And Visitacion expects future releases 
of PeopleSoft’s offering to be more so- 
phisticated than Pacific Edge Software 
Inc.’s package but not quite as robust 
as UMT’s tools in terms of features. 

“The challenge with these tools is 
drawing a line between project man- 
agement and portfolio management,” 
says Ian Campbell, president of Nucle- 
us Research Inc. in Wellesley, Mass. At 
the very least, some of the less sophis- 
ticated tools bring structure to the IT 
portfolio management process, says 
Campbell. But they’re “just a step 
above project management tools and 
lack the ability to do what-if scenar- 
ios,” he says. 

Most IT portfolio management tools 
are priced on a per-seat basis, with a 
typical license starting at $50,000 and 
running to several hundred thousand 


| dollars, depending on the number of 

| users, the configuration and the 

| amount of customization required. 

| UMT prices its software based on the 

| number of business departments being 


says President Mike Gruia. PeopleSoft 
offers a “value-based” pricing model 

| that’s based in part on the customer 
company’s revenue level, says Leone. 


| Getting Started 


For companies just beginning to build 


an IT portfolio management program 


and create a methodology for tracking 
and analyzing their technology invest- 
ments, vendors such as Pacific Edge in 
Bellevue, Wash., and Business Engine 
Corp. in San Francisco are good start- 
ing points in terms of portfolio analy- 
sis and professional services automa- 
tion capabilities, say analysts. 

Pacific Edge’s product — The Edge 
for IT — consolidates projects that are 
tracked using Microsoft Project, “and 
that’s where the strength is,” says Scott 
Marean, assistant vice president of 
program management services at First 
Penn-Pacific Life Insurance Co. in 
Schaumburg, IIl. 

UMT’s software uses a set of algo- 
rithms that help IT managers optimize 
their resources. So if an IT organiza- 
tion has $300 million worth of poten- 
tial projects to pursue and only $50 





supported, typically starting at $75,000, 





million to work with, the user can in- 
put the organization’s business objec- 
tives into the software, which helps 
prioritize them by applying algorithms 
to determine which investments will 
yield the greatest returns. 

The software also finds mismatches 
in IT staffing resources — such as hav- 
ing too many legacy system program- 
mers — to help optimize supply and 
demand between staff and projects, 
says Mike Gruia, president of UMT. 

Like UMT, ProSight also makes use 
of algorithms to run scoring models 
based on financial calculations such as 
economic value added and net present 
value, says John Cimral, the company’s 
CEO. ProSight’s scoring models factor 
in, among other things, the number of 
users, the performance characteristics 
of a system and the hardware and soft- 
ware standardization issues, he adds. 


Limitations and Advances 

One of the shortcomings of most IT 
portfolio management tools is their in- 
ability to “focus on the life cycle of an 
asset,” determine the financial value of 
a software package or piece of hard- 
ware and indicate whether or when it 
makes sense to retire that technology, 
according to Meta Group’s Ross. At 
least one vendor, PeopleSoft, is dis- 
cussing the kinds of asset management 
capabilities sought by its customers for 





a future release, says Leone. 

Some IT portfolio management ven- 
dors are also working on creating “ex- 
ecutive dashboard” modules that let 
CEOs, chief financial officers and oth- 
er senior managers view the results of 
their IT spending decisions in real 


| time and evaluate their IT investment 


options. UMT expects to have a fully 
integrated dashboard available to cus- 
tomers by midyear, says Gruia. 

Pcubed currently offers a portfolio 
dashboard that uses decision-tree 
structures and business intelligence to 
provide business analytics around an 
organization’s portfolio information, 
says CEO Adrian Balfour. 

Vendors still need to fill gaps in their 
IT portfolio management products. For 
example, many systems lack the ability 
to assess risks — a critical component 
in evaluating IT investments. “I don’t 
think any of the tools do a great job of 
leading users to evaluate and measure 
risk,” says Ross. D 


THE OUTSOURCING OPTION 


Blue Cross and Blue Shield of Massachusetts went with 
a third-party service to help assess IT investments: 


QuickLink 35740 

Profiting From Portfolio Management: An 
implementation at First Penn-Pacific Insurance Co. 
increased staff productivity 10%: 


QuickLink 35735 
www.computerworld.com 








What one thing do investors understand 
about your company better than you do? 


Your competitive advantage. 


ae 


In an era of disruptive 

change, Moore uses investor 
perspective to give management 
teams the strategy tools they 


need to navigate. 


“This book is a must read for CEOs and their executive 

team.... According to Geoffrey Moore, you had better start 

shedding non-core activities quickly or your company 4/ MANAGEMENT 

will become a victim? CLASSIC 

—VICE PRESIDENT DICK CHENEY NOW FULLY 
REVISED 


“When you live on the fault line, you have 

to reinvent yourself every single day.’ 

—BOB HERBOLD, FORMER EXECUTIVE VICE 
PRESIDENT AND COO, MICROSOFT 


“Moore shows convincingly that technology and a 


capital market efficiency have fundamentally 
changed not just the reality that all managers face, 
but have changed the way they need to define, 
measure and manage success. This is a great book.” 
—CLAYTON CHRISTENSEN, AUTHOR OF 

THE INNOVATOR’S DILEMMA 


ALSO AVAILABLE FROM HARPERAUDIO AND PERFECTBOUND E-BOOKS 


MANAGING FOR SHAREHOLDER VALUE 
IN ANY ECONOMY 


& HarperBusiness 
An Imprint of HarperCollinsPublishers 
www.harpercollins.com 
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Il for the 
Autobahn 


Autostadt GmbH is Volkswagen AG’s 
information and entertainment park in 
Wolfsburg, Germany, which opened in 
2000. It includes an automotive muse- 
um, an entertainment complex and a 
place for customers to pick up auto- 
mobiles custom-ordered online. As chief 
technology officer, CLAUS HOHMANN is 
responsible for the research and 
development of new technolo- 

gies. Hohmann spoke with Com- 
puterworld’s Linda Rosencrance 
about the Autostadt’s IT infra- 
structure and the unique challenges of 
running the facility. 


What IT challenges did you face in bringing 
Autostadt online? The IS/IT department 
was established 11 months before Auto- 
stadt opened. We came on board on 
this project as the last team, [but] we 
finished a complete IT infrastructure 
and all the basic systems for car deliv- 
ery. 

Because we are unique, we have to 
develop our own systems. That means 
we combine legacy systems of the 
Volkswagen Group worldwide because 
we are delivering here Volkswagen 
products that are produced all over the 
world. 

The main challenge was to provide 
for a system which integrated both 
worlds: The VW systems, which are 
used to move up to 5 million cars per 
year, communicate with the Autostadt 
so that the entire delivery process 
functions with 99.99% reliability. The 
Autostadt is open 364 days per year, 
and the systems must be available for 
a minimum of 12 hours per day. 


What core systems did you choose? The 
Sales and Disposition of New Cars and 
the New Car Transport systems are 
based on IBM System/390, DB2 data- 
base and ... Cobol. The online inter- 
faces use the IBM transaction monitor 
MQSeries and BEA transaction moni- 
tor Tuxedo. 

Due to the location and system com- 
plexity, maintenance can only be car- 


ried out during night hours. Further- 
more, there is also the need to guaran- 
tee 100% data transaction reliability 
and accessibility. This level of guaran- 
tee is provided through the Tuxedo 
system. 


What other unique business needs do you 
have to meet? Our IT infrastruc- 
ture allows us to deliver daily, 
seven days a week, 600 cars a 
day to our customers. Every de- 
livery is an event-oriented activ- 


| ity, and we run special events through- 


| 
| 





out the Autostadt. These attractions 


| are all digitized. 


What do you mean by “digitized”? The ex- 
hibits and attractions in the Autostadt 


| have a show control and run fully auto- 


mated. Our major project in this field 
was the development of a totally new 
... online monitoring system, using 
Crestron [Electronics Inc.] technology, 
where it is possible for us to check the 
status of each exhibit every second... 
right down to what film is running and 


© Our IT infrastruc- 

~ © ture allows us to 
deliver daily, seven days 
a week, 600 cars a day 
to our customers. 


CLAUS HOHMANN, CTO, 
VOLKSWAGEN AUTOSTADT 





which light bulb is on, off or defective. 


What innovative IT projects are in the 
works? We are running via wireless 
LAN all our outdoor areas and... our 
delivery center. Our staff outdoors in 
the theme park, as well as in the car 
delivery process and in the guest 
processes, use handhelds with wireless 
LANs. And we are implementing a 
Bluetooth system for our tour guides 
... to support them with little hand- 
held devices that will give them the 
data and other facts they have to build 
into their stories. 

This project with Pocket PCs and 
Bluetooth is the start of providing our 
employees with information about the 
exhibits and displays while mobile and 
on the job. Integrated into the system 


is a basic localization process [via in- 


frared] so that it is possible to both go 
straight to the information based on 
the exhibit that they are standing next 
to and navigate to the information for 
other exhibits. Vignette has been used 
as a basis to provide the front end and 
database connectivity for the system. 


| What other infrastructure projects are 


planned? We want to utilize the full 
scheme of voice over IP in our cus- 
tomer care center with 40 [worksta- 
tions]. VOIP integrates all communica- 
tion mediums within the Autostadt — 
voice, e-mail, fax and voice recorder, 
[which is] located on the PC. In the 
HiPath Contact Center from Siemens, 
[which allows] classic PBX connec- 
tions and voice over IP, all of these in- 
puts are brought together to improve 
the performance of the call center 
agents. 

[We are also working on] a new 
Autostadt Internet approach, based on 
a content management system [from] 
Vignette. We use Vignette not only for 
the pure HTML pages, but also for 
flash pages and WAP [Wireless Appli- 
cation Protocol]. The WAP presenta- 
tion of Autostadt will be changed to a 
UMTS [Universal Mobile Telecommu- 
nications System] presentation in the 
coming months. 

Our content team writes the articles, 
inclusive of pictures, film content, etc., 
directly in the editorial system, which 
is also Vignette-based. After release 
by the chief editor, the articles are 
launched automatically to our Internet 
presence. The Autostadt provides an 
InfoSite, where current standards of 
HTML are supported, and a Auto- 
sphere site, where leading-edge and 
future possibilities of the Autostadt 
presence shall be shown. This future 
virtual world is also based on Vignette. 





Title: CTO, Volkswa- 
gen Autostadt GmbH 


Lt i 


Accomplishments: As 
CIO at Volkswagen’s 
SkodaAuto a.s. in 

the Czech Republic, 
Hohmann rebuilt the 
group’s IT infrastruc- 
ture and information 
systems. At Auto- 
stadt, he defined, 
built, established and 
manages the hard- 
ware infrastructure 
and multimedia 
equipment for Auto- 
stadt’s attractions. 


You haven’t mentioned that device sitting 
next to you [see photo]. Where does that fit? 
The POIs [point of information termi- 
nals] are a live interface between visi- 
tors and the Autostadt. Here, visitors 
gain access to various topics of infor- 
mation, both written and visual in 
nature. The challenge was to design a 
GUI that was understandable by many 
different nationalities. The POI needed 
therefore to be an interactive multi- 
media terminal. The computer is an 
industrial PC with a touch screen run- 
ning on Linux with a special Web 
browser from Munich-based Jentro 
AG. We use Vignette for generating the 
POI Internet site. The special presen- 
tation for the POI is sent from the 
same servers as the normal Internet 
presentation. 

The special feature of the POI is its 
kinetics. The display body rotates hori- 
zontally and moves vertically if no 
user stands next to the POI. This is a 
form of self-marketing. If the user 
comes, the display body is adjusted 
horizontally and vertically by an ultra- 
sound sensor. We have 30 indoor and 
nine outdoor POIs. The glass POI was 
developed to show the visitor just how 
complex this system is. D 
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Winning on the Web: To help preserve t ecord of one of North America’s oldest sports, the | 


Hockey Hall of Fame chose the IBM @server xSeries” It's helped hhof.com handle a 225% increase 
in traffic over the past year. Select xSeries models feature the Intel® Xeon™ processor for superior 
flexibility and scalability for future growth. For an IDG report on how growing companies are using 
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(server 


Linux® ready with self-managing features for every e-business. 


Intel-based / xSeries 
It’s an affordable and powerful 
combination of mainframe- | 


inspired reliability and smart 
systems management tools. 


UNIX” / pSeries™ 

Highly available, highly affordable 
and highly coveted. The pSefies is 
the platform of choice for powerful 
UNIX and Linux solutions. 


Midrange / iSeries” 

Brings €asy-to-deploy, plug and 
play e-Business to your business 
Sophisticated technology that’s 
easy tomanage and Linux ready 


Mainframe / zSeries™ 

Maximum reliability, maximum power 
maximum flexibility. Designed for up 
to 99.999% uptime’ to handle the 
demands of today’s e-busifiésses 


Consolidate. Cut costs. Be available. At Nintendo, games are a highly competitive business. So they look for any 
edge they can get. By consolidating their core business applications onto one IBM @server iSeries, Nintendo now 
enjoys near 100% availability? and expects to save substantially on hardware maintenance and software costs. For 


a guide on server consolidation, head to ibm.com/eserver/nintendo (business ir the game. Fray to win’ 
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DEFINIT 
Data scrubbing is the proc- 
ess of fixing or eliminat- 
ing individual pieces of 
data that are incorrect, 
incomplete or duplicated 
before the data is passed 
to a data warehouse or 
another application. 


ION 


BY TOMMY PETERSON 
HE NEED TO SCRUB DATA is made pretty clear 
by simple questions like this one: Are Jerry L. 
Jonson of 16 Clarke St., Altuna, PA, and Gerry 
L. Johnson of 16 Clark Street, Altoona, Penn., 
the same person? You would probably say that most 
likely they are. But a computer, without help from 
specialized software, would deal with the informa- 
tion as though it were about two different guys. 

The human eye and mind recognize that the differ- 
ences between the two sets of data records are prob- 
ably the result of mistakes or inconsistencies in data 
entry. Weeding out and fixing or discarding 
inconsistent, incorrect or incomplete data is 
what’s called data scrubbing or cleansing. 

“Dirty data” has been a problem for as long 
as there have been computers — or maybe 
for as long as people have attempted to gath- 


| or millions of pieces of erroneous, 


| In its 2001 report about organizations 


| Cutter Consortium identified the fol- 
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er and analyze information. It’s a large part of the 
“garbage in” that can result in the worthless “garbage 
out” of a computing process. 

The issue of data hygiene has become increasingly 
important as more and more corporations imple- 
ment complex customer relationship management 
(CRM) systems and build data warehouses that 
merge information from many different sources. 

Without data cleansing, the IT staffs of those com- 
panies face the unappetizing prospect of merging 
corrupt or incomplete bits of data 
from multiple databases. A single 
piece of dirty data might seem like a 
trivial problem, but if you multiply 
that “trivial” problem by thousands 


duplicated or inconsistent data, it 
becomes a prescription for chaos. 


Sources of Dirty Data bases 


implementing data warehouses for 
the purpose of business intelligence, 


lowing causes of dirty data: 

@ Poor data entry, which includes 
misspellings, typos and transposi- 
tions, and variations in spelling or 
naming. 

@ Data missing from database 
fields. 

® Lack of companywide or indus- 
trywide data coding standards (a big 
problem in health care, for example). 

® Multiple databases scattered 
throughout different departments or 
organizations, with the data in each 
structured according to the idiosyn- 
cratic rules of that particular data- 
base. 

@ Older systems that contain poor- 
ly documented or obsolete data. 

As the list suggests, data scrubbing 
is aimed at more than eliminating 
errors and redundancy. The goal is also to bring 


| consistency to various data sets that may have been 


created with different, incompatible business rules. 
Without data scrubbing, those sets of data aren’t very 
useful when they’re merged into a warehouse that’s 
supposed to feed business intelligence across an 
organization. 

In the early days of computing, most data scrub- 
bing was done by hand. And when performed by 
bleary-eyed humans, the laborious task of finding 
and then fixing or eliminating incorrect, 
incomplete or duplicated records was costly 
— and it often led to the introduction of new 
errors. 

Now, specialized software tools use sophis- 
ticated algorithms to parse, standardize, cor- 





Data Cleansing 


@ Data cleansing accounts for 
up to 70% of the cost and ef- 
fort of implementing most data 
warehouse projects, according 


@ In 2001, The Data Warehous- 
ing Institute estimated that 
dirty data costs U.S. businesses 
$600 billion per year. 


= Data cleanliness and quality 
was the No. 2 problem - right 
behind budget cuts - cited in a 
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rect, match and consolidate data. Their functions 
range from simple cleansing and enhancement of 
single sets of data to matching, correcting and con- 
solidating database entries from different databases 
and file systems. 

Most of these tools are able to reference compre- 
hensive data sets and use them to correct and en- 
hance data. For example, customer data for a CRM 
application could be referenced and matched to ad- 
ditional customer information, such as household in- 
come and other demographic information. 


| Many Options 


Companies that want to use specialized data cleans- 


| ing tools can get them from several sources. Building 


the tools in-house was the most common choice 
among companies studied by Arlington, Mass.-based 
Cutter Consortium; of the surveyed 
companies that said they were using 
such tools, 31% said they were buiid- 
ing them in-house (see box). 

But companies that choose to buy 
data cleansing software have plenty 
of options. Oracle Corp., Ascential 
Software Corp. in Westboro, Mass., 
and Group 1 Software Inc. in Lan- 
ham, Md., led other vendors in the 
Cutter survey, with 8% of the market 
each. Other vendors, including 
PeopleSoft Inc. in Pleasanton, Calif. 
SAS Institute Inc. in Cary, N.C., and 
Informatica Corp. in Redwood City, 
Calif., were bunched a few percent- 
age points behind. The major data 
warehouse and business-intelligence 
vendors also include data scrubbing 
functionality in their products. 

Vendors such as Acxiom Corp. in 
Little Rock, Ark., and Sagent Tech- 
nology Inc. in Mountain View, Calif., 
offer online data cleansing and en- 
hancement services. These services 
provide data cleansing as well as 
supplemental information on a 
record-by-record basis in near real 
time over the Internet. 

Although data hygiene is essential 
to getting useful results from any ap- 
plication, it shouldn’t be confused 
with data quality, according to busi- 
ness-intelligence analysts. But data 
quality doesn’t really refer to whether data is clean 
or dirty — it’s a matter of whether the data is good 
(valid) or bad (invalid). Validity is a measure of rele- 
vance of the data to the process or analysis at hand. 
The measure of that validity changes with the con- 
text in which the data is used. 

Ideally, data that has been scrubbed is error-free 
and consistent, and some data cleaning software 
even checks for the usefulness of the data it’s proc- 
essing. Data scrubbing is an essential chore for any 
IT operation, but it’s only a starting point. D 
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intel Looks to 
Software 


-arallel-processing prognosti- 
cations. By Gary H. Anthes 


COMPUTER HARDWARE GIANT Intel 
Corp. is also one of the largest soft- 
ware developers in the world, employ- 
ing more than 6,000 software profes- 
sionals. In December, the company 
formed a new position — that of Intel 
senior fellow — at the top of its re- 
search hierarchy and appointed four 
people to the role, including Justin R. 
Rattner, director of microprocessor re- 


What we are definitely looking at in the 
future is program-visible instrument- 
ation so the compiler has access to [run- 
time conditions]. This is on the fly; this 
is the compiler in the loop. 

This is where our heads are at. 


Will we see more parallel proc- 
essing of various types? 
WIRT: We went through get- 


search, and Richard Wirt, general manag- ting computers to parallelize 


er of software and solutions. 
Recently, Rattner and Wirt 

told Computerworld what’s 

coming in the software realm. 


What's new in compilers? 

WIRT: We see activity in traditional 
compilers that adapt programming lan- 
guages better for multithreading and 
hyperthreading. OpenMP, an initiative 
to adapt programming languages to 
handle threading, is a good example. 
[See glossary at right.] 


RATTNER: Today’s instruction sets were 
really designed for static compilers, so 
the trade-offs they make are in favor of 
static compilers. When we move to dy- 
namic compilers [like Java and .Net], 
we can continue to optimize 

even while the program is ex- 

ecuting. The optimizing com- 

piler is querying the hard- 

ware on a periodic basis and 

saying, “How’s the program 

running?” 


But such performance monitors 
aren't new. 

RATTNER: Today, performance 
monitors are really designed 
for debugging, and they are 
inaccessible to the compiler. 


UTURE 
WATCHQ 
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the instructions ona 
single [processor]. 
Intel pushed that to 
get about as much as 
we can get, so now 

~ we are beginning to 
go threaded on single [proc- 
essors]. Then you'll see us 
take multiple [threaded processors] 
and put them on a motherboard. 

As we add more transistors, then, in- 
stead of multiple [processors] on the 
motherboard, we’ll put them on the die, 
on the chip itself. We refer to that as 
dual-core. Then you want to string 
these things together in big clusters. 
Each node gets more powerful as driven 
by Moore’s Law, but we will string more 
and more of these together to form a 

supercomputer. 


How will you get more parallelism 
out of existing applications? 
RATTNER: We've discovered 
you can create “helper 
threads” when certain sit- 
uations arise. A set of helper 
threads created by the com- 
piler can run ahead of the 
main thread in order to bring 
normally missing data into 
the cache ahead of the time 
the main thread will need it. 
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We now have an experimental ver- 
sion of our production compiler that 
will automatically generate helper 
threads. 


How much help will the helper threads be? 
RATTNER: We are finding all kinds of 
clever ways to use them. We’ve seen 
two- to four-times improvements on 
some applications. On average, we'd 
expect to see 1.3 to 1.6, and some pro- 
grams will do amazingly well. 


Over the years, many of the promises of par- 
allel processing have been dashed because 
the software is so difficult to develop. 
WIRT: The problem was, people expect- 
ed the compiler to do it for them, and 
there was a lot of research there. Then 
they came to the conclusion 
that you still needed program- 
mers’ help, and that’s why 
they invented OpenMP with 
those “pragmas,” or hints that 
the programmer puts in the 
application so the compiler 
could parallelize [the code]. 
So as you go across nodes, 
with MPI [the Message Pass- 
ing Interface protocol], you 
break the code into function- 
al blocks, one function on 
one node. The programmer 
does that. But now it’s at a 
higher level of abstraction that the pro- 
grammer can understand. 


That's geared for scientific computing. How 
about commercial applications? 

WIRT: The same thing’s going on — 
breaking up the application into func- 
tions and having them talk to each oth- 
er. Web services is a good example. 
Think of SOAP doing for the business 
world what MPI does for the technical 
world — having objects talk to each 
other in order to give you scalability 
across a cluster or distributed network. 


Where is this headed, and what’s needed 

to get there? 

WIRT: Typically, there are tens of ob- 
jects working together in a business 
app, but in the technical world, people 
are building clusters with 10,000 
nodes. What’s needed are debugging 
and performance-tuning tools, and 
tools that allow you to look at all those 
nodes that are cooperating. D 


Parallel- 
Processing 
Parlance 


OpenMP (multiprocessing). 
A specification for a set of 
compiler directives and library 
routines that can be used to 
specify shared-memory paral- 
lelism in Fortran and C/C++ 


programs. 


Message Passing Interface 
(MPI). A standard that facili- 
tates the development of paral- 
lel applications. It defines the 
syntax and semantics for li- 
brary routines for portable 
message-passing programs 

in Fortran or C/C++. 


Hyperthreading. Intel's way 
to make a single physical 
processor appear to the oper- 
ating system or multithreaded 
user program as two logical 


processors. 


Pragma. A way for the pro- 
grammer to tell the compiler to 
do something “pragmatic” at 
the point in the program where 
the pragma appears. It might 
say to use a certain library or 
generate a certain kind of code 
for parallel processing. 


6 


Helper threads. Small strings 
of instructions that help the 
main application thread per- 
form better. Generated by the 
compiler, they run ahead of the 
main thread and can, for exam- 
ple, bring data into the cache 
in advance so it's available 
when needed. 
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FTP Server Offers 
Key to the Store 


Sloppy practices leave critical user IDs and 
passwords available for public download. 


. 
By Mathias Thurman 
HIS WEEK I was side- | 
tracked from my proj- 
ects yet again by the 
need to investigate two 
security incidents. Both in- 
volved deleted files on servers 
that apparently had been com- 
promised. 

The first incident was more 
of a server configuration issue 
than a traditional security in- 
cident, but it still warranted 
my attention. It start- 
ed when a customer 
sent a message ad- 
dressed to our abuse 
e-mail alias saying 
that he noticed sever- 
al suspicious files on 
our public file trans- 
fer protocol (FTP) server. So I 
logged into the server as an 
anonymous user, and sure 
enough, several directories 
had been created and populat- | 
ed with 4GB of unauthorized 
MP3 music files. | 

Even more alarming, I found | 
a file named Commands that 
contained account names and 
associated passwords for sup- 
port Web sites we use and for 
accessing internal servers in 
my company. 

The special accounts that 
give us access to technical 
support Web sites require user 
IDs and passwords for access. 
We pay tens of thousands of 
dollars per year for some of 
those accounts. It turns out 
that our product support 
group put the file there as a 
repository for what it consid- 
ered shared, nonsensitive in- 
formation. Later, it apparently 
became a repository for all 
sorts of information. 

Unfortunately, we can’t just 
make the anonymous FTP 
server go away. It’s a valuable 
customer service, and our 
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technical support team uses it 
extensively to offer patches 
and other support programs to 
our users. Our customers also 
use it to upload event logs and 
dump files for review by our 
technical support team. There 
are other methods for offering 
this type of service, but the 
anonymous FTP server has 
been the most effective and 
has been accepted by our staff 
and customers. So 
it’s here to stay. But 
if it isn’t configured 
properly, an anony- 
mous FTP server 
can be easily abused 
and become a cata- 
lyst for legal, perfor- 
mance and security issues. 
The MP3 files are one such 
legal issue, since they proba- 
bly violate copyright laws and 
an investigation could embar- 
rass our company. Perfor- 
mance would also suffer if the 
FTP server was saturated with 
such files, or if too many users 
accessed the system simulta- 
neously to try to download the 
files. And we don’t want third 
parties logging into our 
servers or support services. 
Our FTP server had been 


| found a file named 
Commands that 
contained account 
names and associated 
passwords for support 
Web sites we use 
and for accessing 
internal servers. 





configured to let anonymous 
users create their own directo- 
ries, with no limits on the size 
of uploaded files. Simple up- 
load quotas and directory per- 
missions would have prevent- 
ed this incident from happen- 
ing. I’m going to add guide- 
lines for configuring the 
anonymous FTP server to our 
already published secure base- 
line procedures. 


Certifiably Hackable 


The second incident involved 
malicious activity against a 
server in our certification lab. 
A systems engineer noticed 
that one of his source-code 
repository servers wasn’t re- 
sponding when he tried to ac- 
cess it using the Secure Shell 
program. To gain administra- 
tive access to the server, he 
had to use the server console. 
Then he noticed that several 
key directories had been 
deleted, which accounted for 
his initial inability to access 
the server. He then started 


| poking around at the log files. 


I’m sure that this engineer 
wanted to determine the ex- 
tent of damage and identify 
the individual responsible. But 
there are problems in doing 
what he did. First, the incident 
occurred about a month ago, 
and the engineer is just now 
reporting it. Second, by ac- 
cessing files and writing to 
various log files on the system, 
he made it difficult to distin- 
guish between legitimate ac- 
tivity and hacker activity. In 
this case, it wouldn’t have 
mattered, though, because the 
hacker deleted almost every 
log file on the system. 

As a result of this incident, 
we will now use a secure base- 
line to ensure that all of our 
systems, even in labs, are con- 
figured securely. We will also 
temporarily configure an in- 
trusion-detection system sen- 
sor to watch the traffic on the 





lab network segment. Perhaps 
the hacker will try to gain ac- 
cess again. I will also suggest 
that all logs be redirected to a 
central, secure server. 

The problem with security 
incidents in a large, worldwide 
enterprise is that individuals 
don’t know how to respond 
when they encounter hacker- 
like activity. They need to un- 
derstand that certain actions 
must be taken immediately in 
the event of a suspected secu- 
rity breach that involves unau- 
thorized server access. In 
some cases, for instance, the 
administrator should create a 
mirror image of the victimized 
system right away. That way, 
the evidence is preserved be- 
fore the administrator makes 
the changes required to bring 
the system back online. 

For example, the shell histo- 
ry file, which contains a 


| record of keystrokes issued by 


the user, typically contains in- 
criminating evidence of hack- 


| er activity. If the administrator 


has changed the system since 
the incident, it’s difficult for 


| the investigator to tell which 


activity can be attributed to 
the intruder. 

To address this problem, 
I've decided to put together an 
incident reporting program. 
The first part of the project 
will involve creating docu- 
ments to assist both Unix and 
Windows NT administrators 
in evaluating their systems 
when they suspect that there 
has been a compromise. I will 
also provide awareness-train- 
ing documents focused on 
incident response. 

Finally, I will ask the data- 
base team to create a database 
and an associated Web-based 
front end to facilitate the sub- 
mission of incident reports. 
The results can then be 
e-mailed to my team, and we 
can take appropriate action. D 


WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “Mathias Thurman,” 
whose name and employer have been 
disguised for obvious reasons. Contact him 
at mathias_thurman@yahoo.com, or join the 
discussion in our forum: 


QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 
@ computerworld.com/secjournal 
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Security Bookshelf 
802.11 Security, by 
Bruce Potter and 


Bob Fleck, O'Reilly 
& Associates Inc., 


tance of his desk and then 
locks his keyboard sends his 
PC into sleep mode when he 
steps away. 
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Find confidence in the midst of chaos. 


Focus on the best in network security, every step of the way. 


Start with a secure foundation. 

Our operating system, IPSO, is built from the ground up for security. It eliminates 
many vulnerabilities common to general-purpose servers, and also incorporates 
our patented IP Clustering technology. Multiple Nokia security appliances can be 
linked as one, on the fly, for new levels of performance, reliability and scalability. 


Integrate the best in network security expertise. 

Partners like Check Point Software Technologies, Internet Security Systems and FS 
help us deliver the full capabilities of their VPN, firewall, intrusion protection, and 
Internet traffic management applications. To learn about the other ways we give 
our Customers greater peace of mind, just visit www.nokia.com/ipsecurity/na. 


NOKIA 
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Palm's 
Tungsten T 


Palm Slashes Pricing to Match the Competition 


Palm Inc.’s Solutions Group cut prices 
on three of its most popular handheld 
computers last week. 

Palm slashed prices on its flagship 





L5500 Automated Tape Library 


Replace multiple small libraries with a single, easy-to-manage library. Scales up to 


13.2 PB and offers throughput rates over 65 TB/hour. With Tape Mirroring software, 


you simplify and automate tape replication for faster backups and fewer errors. 


D280 Disk Subsystem 


Speed transaction rates and data access with this full, end-to-end 2 GB Fibre Channel 


solution. With Remote Volume Mirroring software, you protect your data through 


data replication and recover quickly with synchronous data transfers. 


Find these and other 


attention-getting solutions 


ar 
savetheday.com 


<= STORAGETEK: 


Save the Day.” 





Tungsten T handheld by 20% to $399, 
The company also dropped the sug- 
gested selling price of its Palm m130 
handheld to $199 and cut the price of 
the m515 by 14% to $299. 

Sam Bhavnani, an analyst at ARS 
Inc. in La Jolla, Calif., said the ae 
cuts are “normal and = , 
cyclical” adjustments as 
Milpitas, Calif.-based ee 
Palm readies the introduction of new 
models, which he anticipates will oc- 
cur within a week. 

The new pricing also brings Palm’s 
products more in line with low-priced 
hardware running the Pocket PC oper- 
ating system from Microsoft Corp., 
Bhavnani said. 


BMC Upgrades Server 
Management Software 


BMC Software Inc. in Houston today is an- 
nouncing new server management capabili- 
ties for Windows and Unix servers. The Pa- 
trol for Windows Servers 3.0 release and 
Patrol for Unix 9.0 each will sell for $815 
per license and are generally available now. 
The upgraded products feature event notifi- 
cation to administrators through paging 
and e-mail. Other new features include im- 
proved workflow and preconfigured set- 
tings for quicker installation, said BMC. 


Proxim Announces New 
WLAN Architecture 


Proxim Corp. in Sunnyvale, Calif., recently 
announced a wireless LAN architecture 
that’s intended to simplify corporate WLAN 
deployments and centralize the intelligence 
of the network. Maestro, which will be 
available later this year, will allow large and 
midsize businesses to integrate, configure 
and centrally manage their WLAN infra- 
structures simultaneously while supporting 


| mobile voice, video and data applications. 


Maestro will provide policy-based wireless 
network administration and support the 
company’s Orinoco line of access points. 
Pricing information isn’t yet available. 


IBM, AOL to Integrate 


Instant Messaging Clients 


IBM and America Online Inc. announced 


| last week that they plan to integrate their 


respective Lotus Sametime and AIM Enter- 
prise Gateway instant messaging clients. 
The gateway device, which FaceTime Com- 
munications Inc. in Foster City, Calif., is 





Hewlett-Packard Co. has slashed 
prices on its Pocket PCs, which sold 
for more than $700 a year ago. HP now 
offers an entry-level model priced at 
$299. Dell Computer Corp. sells a 
Pocket PC device for $249 — up from 


its introductory price in November of 


$199, after a $50 rebate. 
But according to Bhav- 
nani, there is no compari- 


son ‘anim the Pocket PC Tungsten 


T and the Dell Pocket PC. The Tung- 
sten T, he noted, is a sleek, lightweight 
system with built-in Bluetooth wireless 
capabilities, whereas the Dell Pocket 
PC is bulkier with no built-in wireless 
functionality. 

— Bob Brewin 


building, won’t allow external AOL users to 
detect or communicate with Sametime 
users, but it will allow Sametime users to 
access the public AOL network via a single 
log-in. Both companies said they plan to 
continue testing the interfaces during the 
next few months. 


NetSupport Updates 
Desktop Management App 


NetSupport Inc. has released Version 8.0 
of its NetSupport Manager (NSM) remote- 
control desktop management software, 
which is designed to let iT employees trou- 
bleshoot and fix users’ PCs from remote lo- 
cations. NSM 8.0 includes the new Internet 
Gateway feature, which allows for seam- 
less HTTP connections between PCs even if 
they're behind different firewalls, according 
to Alpharetta, Ga.-based NetSupport. Per- 
license pricing starts at $99 for one user 
and decreases as the number of licenses 
ordered increases. 


App to Convert 0S/400 
Output to Other Formats 


Help/Systems Inc. recently announced the 
release of its Robot/Transform product, 
which is intended to convert OS/400 out- 
put with embedded graphics into commonly 
used formats such as Portable Document 
Format (PDF). The product will allow the 
conversion of ASCIl-based spool files con- 
taining Printer Control Language and Ad- 
vanced Function Presentation attributes 
into PDF files natively on IBM iSeries 
servers, according to the Minnetonka, 
Minn.-based company. Robot/Transform 
will be available in mid-April; pricing is 
available upon request. 





Today, if I’m lucky, 
I'll be totally ignored. 
That means systems are humming 
and data is flowing. 
If not, | have to fix it. 


| Preferably, befor&anyone notices. 


\ 


a 
Save the da 


Keep bad things from reaching users and you'll get noticed for all the good you do. One way is to use an L5500 automated tape 
library with Tape Mirroring software for foolproof backup and restore. Or a D280 disk system with Remote Volume Mirroring 
software so systems rebound fast. Whatever your solution, we'll make sure you only get noticed when you want. Learn more 


_ 


about this story and other ways we can help you at www.savetheday.com i STORAGETEK’ Save the Day” 
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Survey Cites Data 
Warehouse Failures 


Forty-one percent of the respon- 
dents to a recent survey said their | 
organizations have experienced 
data warehouse project failures, 
and only 15% said they believe 
their data warehousing efforts 
have been successful. Of the 142 
companies worldwide surveyed 
by Cutter Consortium in Arling- 
ton, Mass., only 27% expressed 
confidence in data warehouse 
technologies, and 21% said 
they're using data mining tech- 
nologies they developed in-house. 


CA Introduces 
Unicenter Upgrades | 


Computer Associates Internation- | 
al Inc. is shipping new versions of | 
its Unicenter Database Manage- 
ment software for IBM’s DB2 
database products on the z/OS 
and 0S/390 mainframe systems. 
The new versions include in- 
creased integration and proactive 
management capabilities, CA 
said. Pricing starts at $5,000. 


Haht Releases v7.1 
Of Commerce Suite | 


Haht Commerce Inc. in Raleigh, 
N.C., has shipped Version 7.1 of 
its Commerce Suite. The new re- 
lease has demand chain manage- 
ment options for manufacturers 
of chemicals, consumer products 





and industrial hard goods such as 
plumbing products. Prices range 
from $75,000 to $250,000. 


Ipswitch Enters 
Enterprise IM Fray 


Ipswitch Inc. is joining the instant | 
messaging (IM) wars with its 
Ipswitch Instant Messenger. De- 
signed for corporate use, the new | 
product will cost $695 for an un- 
limited number of users and will | 
offer secure managed IM capabil- | 
ities with full message logging 
and encryption. Lexington, Mass.- | 
based Ipswitch said the system 

will include personal contact lists | 
and other familiar IM features. | 


Gett 


VERY YEAR afte 


NICHOLAS PETRELEY 


ing Out the 
Crystal Ball 


r the dust of the holidays 


settles, I like to wipe off the old crystal ball 
and take a peek into the future of IT. Before 
I get started with this set of predictions, al- 


low me to boast 


a moment about my record. 


My predictions may not pan out as quickly as I expect, 
but they usually come to pass. 


I began talking about 
Linux in 1995. In 1996, I was 
one of the few to predict 
that it would become a 
mainstream server operat- 
ing system. In 1997, I pre- 
dicted that it would sup- 
plant Windows NT as the 
future server platform of 
choice when others were 
still saying it had a snow- 
ball’s chance in hell. When 
Oracle gave a thumbs up to 
Linux in mid-1998, IBM 
still insisted that it had no intention of 
supporting the platform. Nearly five 
years later, IBM adores Linux, now the 
fastest-growing server platform. Score 
a big one for the Petreleymeister. 


Network Computing Inevitable 
This year’s first prediction isn’t a new 
one, but an extension of a previous 
prognostication that hasn’t yet been 
fulfilled. As unlikely as I’m sure it 
seems, I predict that the era of net- 
work computing is still inevitable. 
Granted, it seems very unlikely. I’d 
love to say that the death of the net- 
work computer has been greatly ex- 
aggerated, but it hasn’t. It’s difficult 
to find anyone discussing the concept 
of a network computer, let alone lo- 
cate someone actually using one. 
Strictly speaking, every X Terminal 
qualifies as a network computer, but 
you won’t find many of the cheap, 
Java-based desktops that Oracle, IBM 


and Sun had hoped would 
flourish. 

Nevertheless, I predict 
that the Java-based net- 
work computer will rise 
again — and perhaps fall 
again. But it will eventual- 
ly be a smashing success. 


Java on the Client 

My next prediction is a 

prerequisite of the last one 

and one of the reasons I 
See still feel bullish on the net- 
| work computer: The next two years 
will see a huge revival of interest in 
Java on the client. This will catch 
many people by surprise, especially 
after client-side Java was soundly 
trashed by embarrassing failures like 
Java-based WordPerfect Office. 

One indication that Java will enjoy 
success on the client is that the plat- 
form neutrality of Java has improved 
| dramatically over the past few years. 

Java’s performance has improved, 
too, but not so much that feature- 
laden Java programs run as fast as 
equivalent applications written in C. 
That performance penalty isn’t bad 
news, though, at least for companies 
desperate to find a good reason to 
convince you of the need to upgrade 
your overpowered desktop PC. 

But the most compelling sign that 
Java is headed for the client is that 
there are now a handful of extremely 
powerful open-source development 








environments written for Java and 
written in Java. There’s NetBeans, Sun 
ONE Studio (based on NetBeans), 
Eclipse, jEdit and more. The only rea- 
son open-source development tools 


| exist for any language is to scratch an 


itch. The fact that so many excellent 
tools now exist for Java and are writ- 
ten in it should tell you that there are 
a lot of itchy Java developers out there 
with loads of talent for writing client 
applications. 

Sun is probably the only factor that 
could thwart this prophecy. Often, the 
company is as much of an impediment 
to Java’s progress as it is responsible 
for that progress. The success of Lin- 
ux was easy to predict because the 
momentum of Linux and open source 
doesn’t depend upon any single 
provider. That’s why the rate at which 
government agencies, power utilities, 
retail chains and high-profile compa- 
nies are migrating to Linux continues 
to increase, even as Linux distributors 
drop like flies. But if Sun folded to- 
morrow, confidence in Java would suf- 
fer. The result would probably be fatal 
unless a company like IBM snatched 
up Java immediately. 


Microsoft Targets Home Media 
My last prediction is that Microsoft 
will temporarily give up on winning 
the server market and refocus its at- 
tention on undermining and destroy- 
ing competition for the home media 
center. Along the way, Microsoft will 
change product names and technolo- 
gy terms at least twice. “Windows 
-Net Server” is already history, as is 
“Palladium.” It’s a long shot, but 
thanks to Slammer, we might even see 
a new name for SQL Server. D 


WANT OUR OPINION? — 


For more columns and links to our archives, go to: 
www.computerworld.com/opinions 
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Want to cut your IT costs without sacrificing 
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QUOTE OF THE WEEK 

é I’m a fan of leverage, and | think partnerships 
with world-class providers at the infrastruc- 

ture level, at the application level and at the services 

layer all make a ton of sense. They'll certainly be the 

blades in my Swiss Army Knife going forward.” 

- John McKinley, CTO at Merrill Lynch. Page 48 


What ClOs Need From QuickScan: Training 

IT Suppliers: A Baker’s Dozen ae United Stationers CIO Ergin 
Deciding which suppliers to retain is “i Uskup relies on employee 

a complex decision. Columnist Bart ’ feedback to evaluate training 
Perkins offers C1Os a checklist they can options. Here’s a look at some 
use to help them decide which suppli- of the hottest IT certifications 
ers should be on their A-lists. Page 48 | Se SAC for this year. Page 47 


| ClOsscratch for - 
_ more ways to hold 
down IT spending. 
By Thomas Hoffman 


aving spent the past two years paring back 

staff, consolidating servers and storage 

equipment, renegotiating vendor contracts 

and conducting selective outsourcing, 

CIOs are struggling to find new ways to 
reduce costs without cutting into the muscle of their 
IT operations. 

Je’ve done all those things, and yet management 

still wants us to cut costs further,” says a CIO at a 
Midwestern bank who requested anonymity. “I just 
don’t know where else to cut.” 

In their quest to come up with even more ways to 
keep a lid on costs, dauntless IT leaders are explor- 
ing everything from barter agreements with vendors 
to reselling services and joining purchasing consor- 
tiums for volume price discounts on equipment. 

Take Wyndham International Inc.’s chief tech- 
nology officer, Mark Hedley. Like many IT execu- 
tives, Hedley has taken advantage of the cutthroat 
competition that the economy has stirred up in the 
telecommunications sector and has reworked the 
2 hospitality firm’s private branch exchange, data 

TUT ae Ce EC ee ee lal = | and voice networking agreements, thus paring 
to cutting their IT costs, such as offering-vendors hotel rooms in exchange for computer equipment. $850,000 from the Dallas-based company’s annual 
telecom budget. 


Now Hedley is considering shifting Wyndham’s 
private frame relay to the public Internet as a way to 
further reduce data communications costs by as 
much as 50% annually. But he must weigh the poten- 

: | tial money-saving benefits of doing so against the se- 

| curity, stability and reliability issues involved with 
moving to a public network infrastructure. 

He and his team are also evaluating a number of 
even more novel ways to cut IT costs. Among them 
is the possibility of offering hardware vendors hotel 

i rooms in return for computer equipment. 

“Trading the value of a guest room for the value of 

' equipment is very doable for us,” says Hedley. Last 

i summer, Hedley and his team began evaluating 

| which IT projects might be a good fit for these types 

of barter arrangements, but he declined to discuss 

: them further. And while he also declined to name 

; Continued on page 42 
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the vendors he has discussed this op- 
tion with, Hedley says the potential for 
establishing such deals is “very real.” 


Shared Savings 


Many organizations have centralized 
their IT operations to help rein in costs 
over the past few years. But some glob- 
al firms, such as Madison, N.J.-based 
Wyeth, a $14.6 billion pharmaceutical 
company, have taken centralization a 


step further and shifted to a shared-ser- | 

| those businesses grow and determine 

| at year’s end whether it makes sense to 

| revisit the shared-services model with 
them, Fadem says. 


vices model in regions where they’ve 
determined that it’s efficient and cost- 
effective. 

As a holding company with various 
businesses, “IT was decentralized, and 
there was no need to standardize or 
have a shared-services function,” says 
CIO Bruce Fadem. 

Since 1998, Wyeth has been migrat- 
ing to a shared-services model under 
which its various businesses and geo- 
graphic divisions share IT applications 
and infrastructure and their costs 
across the organization. Having com- 
pleted the transition in North America 
and Latin America, Wyeth is hoping to 
consolidate the 80% of its European 

We have an 


+ aging work- 

force, and a lot of 

those people are 
considering retirement. So as 
we automate processes, we look 
for the opportunity not to refill 
some of those positions.” 


Diane Bunch, senior vice president of 
information services, Tennessee Valley 
Authority, Knoxville, Tenn. 

If you spend 


ae twice as many 


dollars, you don’t 

get twice as much 
storage or bandwidth. There’s 
a great multiplying effect in the 
tech business. It ramps up 
exponentially, not linearly.” 
John Bielec, vice president of information 
resources and technology, Drexel University, 
Philadelphia 
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business that hasn't already been fold- 
ed into the shared-services model. 
This includes outlying units that still 
have their own dedicated IT units. 

“In 2003, we’re doing the tough 


| work, taking those relatively small 

| businesses and working through the 

| political battles” to migrate them into 

| shared services to further reduce costs, 


says Fadem. 
Still, there are limits to applying the 


| shared-services model to all of Wyeth’s 


international entities. In Asia, for in- 


| stance, the company’s divisions are 
| much smaller and more widely distrib- 
| uted than those in other parts of the 


world, says Fadem. So instead of pro- 
viding those units with shared services 


| from regional IT centers, Wyeth for 
| now will allow them to operate inde- 


pendently. The company will see how 


The cost savings generated so far 


| under Wyeth’s shared-services model 
vary greatly by the level of IT invest- 
ment in each region and by other geo- 


graphical differences. Fadem estimates 
that the approach has led to 10% to 15% 


| cost savings in most regions. Once the 


European piece of the puzzle has been 
completed, “we'll be able to implement 
services like [regional] enterprise sys- 


| tems that we couldn’t have done other- 


wise,” he adds. 


Cleaning the Attic 

Some CIOs see the increased cost 
pressures they’re under as an opportu- 
nity to clean house and get rid of some 


| unneeded or rarely used applications. 


That’s precisely what Tennessee Valley 
Authority (TVA) has done in conjunc- 
tion with its migration from Windows 


| 95 to Windows XP, which began in 


October 2001. 

Since then, the Knoxville-based 
public power company has eliminated 
2,300 of 4,700 desktop applications, 
databases and other software, which 
in some instances included multiple 
versions of the same application, says 
Diane Bunch, senior vice president 
of information services at TVA. The 
ability to avoid future PC capacity up- 
grades is one area of cost savings re- 
sulting from the move, since fewer 
applications mean reduced CPU and 
storage needs, says Bunch. 

The house-cleaning exercise also 
gave TVA an opportunity to renegoti- 
ate site licenses for software that it will 
continue to use. For example, a re- 
worked contract for a project schedul- 
ing package should save the company 


$40,000 per year, says Bunch. “We're 
working on several other licensing 
agreements, and $10,000 here and 
$5,000 there in cost savings can add up 
| to significant cost avoidance,” she says. 
Pennies on the Dollar 
A growing number of companies are 
taking advantage of used equipment 
that’s still flooding the market from 
failed dot-coms and other businesses. 
Through online auctions, Corning 
Inc.’s Life Sciences division in Acton, 
Mass., bought what CIO Howard 
Piggee describes as some “cheap” 
servers. The servers cost 50 cents on 
the dollar and replaced most of the 
ones that were running the company’s 
PeopleSoft Inc. enterprise resource 
planning system 

As a result, Corning cut its annual 
hardware licensing and support costs by 
$100,000 because the newer servers it 
bought online are less expensive to run 
than the older models they replaced. 


Power in Numbers 

A big-dollar software licensing agree- 
ment with a major vendor was placing 
a drag on Drexel University’s IT bud- 
get, so John Bielec, vice president of in- 
formation resources and technology, 
found himself in search of ways to 
bring those costs down. Research on 


Accelerate time to market of tech- 
nology-based business initiatives. 
EXAMPLE: Lower total initiative costs 
by restructuring projects to accelerate 
time to market. 
Focus on short-term, high-return 
business initiatives. 
EXAMPLE: Take on short-term projects 
up to two months long that lower busi- 
ness-unit costs and transfer savings to 
the IT budget. 
Transfer IT budget money from 
renewal and enhancement proj- 
ects to business transformation. 
EXAMPLE: Double or triple new- 
initiative funding by reducing renewal 
and enhancement project dollars. 
Selective process outsourcing. 
EXAMPLE: Outsource desktop 
management, PC support and printers. 
Increase in-house IT staff. 
EXAMPLE: Transfer projects 
that use outside services to internal 
IT staff. 


INTERUNITY RESEARCH. 2 
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TECHNOLOGY BUDGET IMPACT 
Business unit 
Business unit 


Business unit 


IT department 
IT department 
IT department 
iT department 
i department 


IT department 
Business unit 


the topic led him to a Middletown, 
Conn.-based educational purchasing 
consortium called the North East Re- 
gional Computing Program, which 
Drexel joined last year. By doing so, 
Philadelphia-based Drexel was able to 
lower its annual software licensing fees 
with the vendor in question, thanks to 
special rates for consortium members. 

Says Bielec, “There’s always power 
to negotiate if you have volume.” D 


Top 10 Ways to 
Do More Wit 


Less 


Renegotiate telecommunications 
contracts. 
EXAMPLE: Toll-free numbers, T1s, long 
distance and virtual private networks. 
Rationalize and simplify your 
infrastructure. 
EXAMPLE: Simplify server complex to 
improve use and reduce maintenance and 
support costs, and to reduce the number 
of data centers. 
improve procurement practices 
for IT products and services. 
EXAMPLE: Restructure procurement to 
achieve a higher level of discounts. 
Quisource development and 
support to offshore providers. 
EXAMPLE: Establish targeted levels of 
outsourcing to lower-cost countries, such 
as China, India, Croatia and Canada. 
1 Review maintenance invoices, 
agreements and asset lists. 
EXAMPLE: Compare maintenance in- 
voices to asset inventory for decommis- 
sioned assets. 
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MESSAGING 


1] WIN WITH SPEED: No question about it. Whether it’s on a PDA FAILED ATTEMPT 
or a PC, the faster your workforce can exchange ideas, the faster 


they can act on them aa UM i) R 


2] WIN WITH LOTUS: As the leader in business instant messaging, 
Lotus Sametime” helps you locate and communicate with 
the people you need, instantly and securely. Lotus. Part of our 
software portfolio including DB2? Tivoli* and WebSphere . 

3] MAKE THE PLAY: Visit ilam.comn/lotus/team for a Webcast f A 


on instant messaging and its effects on speed of collaboration 
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Blind Faith 


Why is it so hard to kill certain doomed 
projects? By Kathleen Melymuka 


Everyone has 
seen it: the IT 
project that 
takes on sucha 
life of its own 
that it becomes 
virtually impos- 
sible to stop, 
even though all 
signs point to its 
ultimate failure. How do proj- 
ects create this kind of momen- 
tum, and why is it so difficult 
to pull the plug on a clear loser? 
In this month’s Harvard Busi- 
ness Review, Isabelle Royer, 
an assistant professor at the 
University of Paris, Dauphine, 
blames an irrational optimism 
that blinds everyone involved 
to the reality of the project. 
Royer recently spoke with 
Computerworld to explain the 


origins of this “collective belief” 


and suggest ways that IT proj- 
ect teams can avoid it. 


You tell some amazing stories 
about doomed projects that sucked 
up tremendous amounts of time 
and resources before anyone 
pulled the plug. Why do companies 
often find it so hard to kill bad proj- 
ects? One could think of man- 
agerial incompetence or bu- 
reaucratic inertia. What I 
found is rather that companies 
cannot envision that the proj- 
ect is going to fail. This hap- 
pens because there is a collec- 
tive belief among managers in 
the eventual success of the 
project. 


What is collective belief, and how 
does it adversely affect an organi- 
zation? What I call a collective 
belief is a strong conviction 
based on feeling rather than 
evidence that the project will 
eventually succeed. This con- 
viction is shared by most of 
the decision-makers. This col- 
lective belief blinds them to 





negative feedback. Moreover, 
even when they are able to 
spot problems, this leads them 
to increase their commitment 
and pursue the project more 
ardently. They are too enthusi- 
astic and emotionally attached 
to the project to envision a 
failure. 


How does the project champion 
contribute to this problem? The 
project champion plays a key 
role in building and sustaining 
the collective belief. He or she 
is usually the original true be- 
liever who will spread the be- 
lief to others using his or her 
credibility and charisma. 
When problems are identified, 
the project champion partici- 
pates to sustain the belief by 
his or her enthusiasm, or even 
with false reports. 


You note that individuals often 
have their own agendas that 
strengthen this belief in success. 
Yes, each individual has per- 
sonal expectations in a com- 
pany. The CEO might see the 
project as a way to sustain ac- 
tivity in a division, the project 
manager as a road to promo- 





tion to a higher position. The 
belief is adopted more easily 
and is stronger when it fulfills 
individual expectations. 


What happens to dissenters when 
you have collective belief? Believ- 
ers just don’t pay attention. 
When dissenters insist, believ- 
ers don’t address their con- 
cern but rather try to discredit 
them. Typically, they accuse 
dissenters of a lack of compe- 
tence. So after a while, dis- 
senters stop voicing their 
opinion. This gives the im- 
pression of unanimity. 


I see the danger, but how can you 
rally a project team unless it truly 
believes in the project? At the be- 
ginning of a project, there is 
lots of uncertainty, especially 
when the project is highly in- 
novative. Belief is needed to 
start a project, since evidence 
is lacking. But as the project 
unfolds, data amass that allow 
checking whether this belief 
becomes reality or not. When 
the collective belief is too 
strong, team members don’t 
interpret negative feedback as 
a sign of failure. 


Know Your Champions 


The types of individuals who gravitate toward the project champion 
and exit champion roles are similar, says Isabelle Royer, but there are 
key differences in the way their roles play out: 


Operates in an uncertain, ambigu- 
ous environment. 


Cee eeeseeresereseeesesseseese 


Violates or overrides procedures to 
remove obstacles to a project. 


Cee eeesereseesereseresesseoss 


Risks reputation if project fails. 


seme rerereresseeeeeees 


Removes ambiguity with hard 
evidence. 


See e eee esereeesreeeeseeseeees 


Restores procedures to ascertain 
project viability. 


Risks reputation by challenging 
popular project. 


Willing to take the initiative to assume critical roles that aren't assigned. 


POOR OP EPO H ESET EEOC SETHE EOE ESSE EEO E SEES ESE EEE EERE SESE OEEEEES 


Are energetic and determined enough to overcome obstacles, skepticism. 





Most IT projects have to pass 
periodic gateway reviews before 
they can proceed. Doesn't that 
solve these problems? This is 
only a first step. Periodic gate- 
way reviews are set up to eval- 
uate the project and decide 
whether to continue, stop or 
modify it. When a collective 
belief dominates, the review 
process is not followed rigor- 
ously. For instance, rather than 
checking that a problem has 
been solved, saying that the 
solution is at hand would be 
enough to go ahead. 


You talk about some early staffing 


decisions that can short-circuit the 
development of collective belief. 
Tell me about those. Oftentimes, 
managers staff project teams 
based on enthusi- 
asm to participate 
and good personal 
relationships. In 
doing so, they cre- 
ate a cohesive 
group of believers 
that will have a 
tendency to esca- 
late. To avoid that, it’s impor- 
tant to involve people who are 
more skeptical and able to 
point out potential problems. 
It is also important to replace 
some of the decision-makers 
during the course of action, 
because newcomers will look 


| at the project with fresh eyes. 


But smoothly running, cohesive 
project teams are the Holy Grail in 
IT. Wouldn’t this approach jeopar- 
dize that goal? This is a matter 
of balance. Personal rivalry or 
dissent in a group would jeop- 


| ardize the goal, but so would 


too much cohesion. When 
the cohesion is too strong, 
there is no debate whatsoever 
inside the group about the 
project. Skeptics in a group 
ask for more explanations 
and evidence than others [be- 
fore they will agree to move 
ahead]. This might lead to a 
conflict, but a positive one, 
leading to better evaluations 
and decisions. 


Above all, you stress the need for 
an “exit champion.” Who is that, 
and what does he or she do? Well, 
when most of the people in- 
volved are blinded by their be- 
lief, and when the procedure 





PROJECTS IN 
THE BLACK 
To learn more about how 


to keep IT projects on track 
and in the black, go to: 


@ QuickLink 28774 
www.computerworld.com 
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is lenient, failing projects are 
unlikely to be stopped without 
an exit champion. Exit cham- 
pions take the initiative to de- 
fend exit, which will usually 
lead to conflict with believers. 
To convince others that exit is 
a better course than continua- 
tion, they have to bring evi- 
dence, which usually means 
introducing or restoring a rig- 
orous evaluation procedure. 
This role requires many quali- 
ties similar to those of cham- 
pions, such as credibility and 
risk taking. 


What's the difference between 

an exit champion and the kind of 
naysayer that can sap the life out 
of a project team? Naysayers are 
known to always have a nega- 
tive opinion, which 
undermines their 
credibility. On the 
contrary, the exit 
champion is not 
always negative. 
Many of them have 
also been project 
champions in the 
past. Further, naysayers usual- 
ly merely voice their negative 
opinion, whereas exit champi- 
ons take action to defend exit. 


Exit champion seems like a thank- 
less role. How do you get it to be 
valued in the company so people 
will step up to this role - and be lis- 
tened to when they do? Top man- 
agers may point out they value 
this role by telling stories of 
courageous exit champions 
who saved their organization 
millions of dollars. They 
should at least make it clear 
that challenges to a popular 
project are welcome. At the 
same time, they need to de- 
mand strong evidence regard- 
ing the need to end a project. 
Failing to do so would system- 
atically favor exit, which 
would discourage new proj- 
ects. Here again, there is a bal- 
ance to be found. D 

Melymuka is a Computerworld 
contributing writer. Contact her 
at kmelymuka@earthlink.net. 


This is the latest in a series of 
discussions 
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2] WIN WITH WEBSPHERE: WebSphere offers a pre-integrated 
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ACIOS First 
Year on the Job 


| Sony exec talks about 
cutting costs and tak- 
ing the mystery out of 
IT. By Jean Consilvio 


Despite what has been 
one of the worst years for 
the economy, especially 
in the IT sector, Jim Milde 
says he has accomplished just about 
everything he said he would when he 
took over as CIO at Sony Electronics 
| Inc. last January. For starters, he helped 
develop solid business cases for Sony’s 
IT projects by working with different 
functional departments to prioritize 
investments and quantify their returns. 
Another key goal he set and met is mov- 
ing toward common processes to in- 
crease the overall efficiency of IT. 
As CIO, Milde is responsible for all 
IT within Sony’s electronics division, 
| which comprises about 20,000 users, 
eight major manufacturing operations 
and 100 other facilities in the U.S. Milde 
| says Sony views the CIO role as much 
more strategic than other companies he 
has been with in the past did. He spoke 
with Computerworld about how he has 
worked to drive business change while 
making sure that Sony gets the biggest 





Title: CIO 
Company: Sony Electronies Inc. 
Location: Park Ridge, N.J. 


Accomplishments: Renegotiated contracts for voice and data 
networks, hardware and software licenses. Set up a shared 
IT services model across Sony Music Entertainment Inc. 
and Sony Pictures to consolidate data centers. Finalized 
outsourcing contracts. to move most programming offshore. 


| bang out of its IT buck in his inaugural 
year on the job. 


What has been your biggest challenge in the 
past year? The biggest challenge would 
be repositioning IT with the business. 
The way we went about doing that was 
really just by building the level of cred- 
ibility and taking the mystery out of IS 
— from a cost perspective, from a ser- 
vice perspective, from new invest- 
ments and how we improve and fund 
projects. And most important, a lot 
more rigor on the ROIs of those invest- 
| ments. What we found was that there 
wasn’t a good understanding of what 
the investments were being spent on. 
And [we] started putting up screens 
for [justifying IT project 
| investments]. 


How did you accomplish all 
that? We did set up fairly 
active business-governance 
groups. Those groups have 
decision-making within 
their areas, and then broad- 
er questions go across the 
various constituencies for prioritizing 
of projects. But it’s not easy, because 
everyone wants what they want, and 
no one wants to hear about someone 
else’s project being screened against 
their project. We’ve been very success- 
ful at just building that relationship, 
the process for governing and taking 
the mystery out of the IT spend. And 
quite frankly, partnering — I hate to 
use that word — but truly having a seat 
at the table on these major structural 


go to 


IS investments behind them. 


How do you go about determining the ROI 
for these projects? We try to think about 
every investment dollar we spend, 
whether it’s on routers or whether it’s 
on applications. So [the] first thing is 
categorizing all of our investment dol- 
lars that we spend. The second thing 
we've done is taken all the “shadow IT 
spend” out of the business and put that 








PROJECT UPDATE 


To learn more about changes 
Jim Milde has made within 
Sony's IT organization and 
updates on specific projects, 
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things we're looking at that have major | 
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all on the table so we have a true look 
at our total IS investment spend. Then 
we go through, and for every single 
project [we determine if it’s] for legal 
reasons, R&D compliance reasons, or 
is there real hard-dollar ROI that’s ei- 
ther going to drive efficiency or top- 
line sales growth. Then we start to 
screen those projects against what ap- 
plications we are building them on to 
ensure that we eventually have a more 
simplified application portfolio. And 
we've got tools in place now so that 
every project goes through a request 
and we can sort the projects by these 
different types of categories. 

Lastly, on the [projects] that are ap- 
proved with the ROIs, we are working 
with our corporate planning group to 
go into the business areas and really 
identify where those hard dollars are 
going to be saved out of the business 
departmental budgets. A lot of com- 
panies say there’s an ROI, but you 
never capture the savings in the busi- 
ness area. 


How do you get business to buy in? My 
first few months just talking to people 
I always asked: “Well, tell me what suc- 
cess would look like from a business 
perspective for what IS needs to do,” 
and it was remarkable that a lot of peo- 
ple couldn’t answer what 
were the three things they 
would want to see differ- 
ent. So we put out a very 
formal questionnaire to the 
top 500 executives across 
Sony Electronics, conduct- 
ed by Gartner Inc. It essen- 
tially gave specific ques- 
tions and things that we 
wanted opinions on. And quite frankly, 
it wasn’t that positive of a scorecard. 
But my point is, we’re trying to lead by 
saying, “Tell me the things that success 
would be predicated on, from the 
voice of our customer.” We’re taking a 
Six Sigma approach toward this, and 
people are starting to see that we do 
want to make sure that we’re hearing 
the voice of our customers. 

And now we've got actionable mea- 
sures against areas that we have op- 
portunities to improve on and commu- 
nicate that back to the business. It’s 
always risky doing that, because peo- 
ple can just kick the IT dog if they 
want to. But the only way I know to 
improve is to hear what people want 
improved. And when people can’t 
articulate what they want improved, 

I know there’s educating that we 
have to do to take the mystique out 
of IS. ... It’s building the credibility 
and the trust. D 
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[ QUICKSCAN: 


The 10 Hottest 
IT Certifications 
For 2003 


The following ranking is based not on the most 
popular certifications, but rather on the fastest- 
growing certifications in the industry, according 
to Becky Nagel, editor of CertCities.com. The on- 
line magazine for IT professionals surveyed its 
readers to come up with the following list of hot 
IT certifications for this year. For each certifica- 
tion considered, CertCities compared the number 
of respondents who said they hold a particular 
certification with the number who said they 
would be getting the certification within the next 
12 months. 


Cisco Certified Internetwork Expert (CCIE) 
Security+ 

Red Hat Certified Engineer (RHCE) 

Cisco Certified Network Professional (CCNP) 
Certified Information Systems Security 
Professional (CISSP) 

Check Point Certified Security Administrator (CCSA) 
Linux+ 

Microsoft Certified Systems Administrator (MCSA) 
Sun Certified System Administrator for 

Solaris Operating Environment 

Tie: Citrix Certified Enterprise Administrator 
(CCEA) and Microsoft Certified Database 
Administrator (MCDBA) 


@ For more information, go to www.certcities.com. 


The Top 10 
‘Most Promising’ 
Technologies 


im Wireless: 3G, 802.11, LAN/WAN, cell phones, 
radio frequency identification (RFID) 


Web services 

XML 

VOIP (converged data/voice recognition) 
Vertical industry-specific technologies 
Linux 


E-commerce: Electronic data interchange 
(EDI), transaction processing 


Handheld computing 


Training J 


New Securi 
Certification Tests 
Begin in June 


The Information Systems Audit and Control 
Association in Rolling Meadows, IIL. will 
begin offering the examination for its new 
Certified Information Security Manager 
(CISM) designation in June. The exam will 
cover the following areas: 


PERCENTAGE OF TEST 


information Information 
security security 
management governance 


Information 

security 

: program 

Response “d Mamet nent 
management Risk management 


@ For more information, go to www.isaca.org. 


How Companies 
Deliver IT Training 


BASE: 193 COMPANIES 


Classroom- — 
ba: " . 

aati delivered by 
led training Ls Bis) —— 


Internet- 
based training 


Evaluating the 
Cost-Effectiveness 
Of Training 


Geiting feedback through surveys or informal 
post-training interviews is a good way to mea- 
sure the effectiveness of your IT training, man- 
agers say. At United Stationers 
ny ii Inc. in Des Plaines, Ill, IT em- 
1 i ployees fill out a questionnaire 
following an IT training session, 
says Ergin Uskup, CIO and senior vice president 
of MIS. The company’s training manager then 
has one-on-one follow-up conversations with 
employees to see whether the experience met 
their needs and whether they would recommend 
the class to colleagues. 

Three months later, the training manager 
checks in again with employees and their man- 
agers to see if the training 
helped the employees improve 
their skills. Managers then act 
on the information gleaned 
from these conversations. Unit- 
ed Stationers, which allocates 
about $450,000 per year to train 
about 250 IT employees, enters 
into partnerships with training ere 
companies that receive a high eae ERE A 
rating and drops those that per- eRe 
form poorly, says Uskup. 


Train Workers ‘Just in Time’ 


Another way to maximize training dollars, say 
managers, is to put the trainee’s new knowledge 
to work right away. At United Stationers, employ- 
ees get to work on projects related to their train- 
ing immediately after classes about 75% of the 
time, says Uskup. In addition, the company gives 
priority to skills training that employees will 
need in the short term 

“We always try to match training with a task,” 
says David Molchany, CIO of the Fairfax County 
government in Fairfax, Va., which annually 
spends $600,000 on IT training. Managers work 
with employees to create a plan for trainees to 
use their know-how soon after a class. For in- 
stance, if staffers attend training on installing Mi- 
crosoft Corp. products, they might use what they 
learned when they return to work by performing 
a software implementation. Molchany calls this 
“just-in-time training.” 


arccli Beh) tlie 


— Julia King 


Where Certifications and Paychecks Meet 


The following lists show the median premium pay as a percentage of the 


base for each of the highest- and lowest-paying certifications: 


Highest Paying 


Lowest Paying 


Project Management Professionai bid 
Enterprise application integration Microsoft Certified Trainer PL 
(integration brokers, middleware) GIAC Certified Intrusion Analyst ro 


SOURCE: COMPUTERWORLO'S 2003 PREMIER 100 IT |. EADERS SUR SOURCE: FOOTE PARTNERS LLC, NEW CANAAN, CONN., FOURTH QUARTER 2002 


CompTIA PC Technician (A+) 
Microsoft Certified Professional 
Certified Computing Professional 


Customer reiationship management (CRM) 
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BART PERKINS 


at CIOs Need From IT 
uppliers: A Baker’s Dozen 


ANY CIOS ARE reducing the number 
of IT suppliers they use in order to 
consolidate purchasing and cut costs. 
Deciding which suppliers to retain is 
a complex decision. Here’s a checklist 


you can use to decide which 
suppliers should be on your 
A-list. CIOs need suppliers 
to do the following: 

1. Deliver quality products 
that solve problems. Suppli- 
ers must provide solutions 
that address the needs of 
the IT organization and not 
merely push their latest 
products. This requires 
careful listening and adapt- 
ability on the supplier’s 
part. A supplier worth re- 
taining won't deliver just 
a standard set of Power- 

Point slides. 

2. Present a business case. 

Suppliers should provide a customized 
business case that clearly describes 
scope and objectives and calculates re- 
turn on investment. Returns should be 
measured using the same metrics that 
your IT organization uses to evaluate 
other investments (such as ROI or net 
present value). 

3. Sell through the IT organization. Many 
suppliers jeopardize IT continuity and 
antagonize the CIO by attempting an 
end run, selling directly to business 
units or other non-IT executives. Sup- 
pliers that take this approach may 
make the sale, but they often fail to 
understand the company’s overall, 
long-term IT plans. 

4. Leash their sales forces. Historically, 
many IT suppliers have overpromised 
and underdelivered. If you have sup- 
pliers that have oversold you, the last 
thing you want is to re-up for a repeat 
disappointment. 

5. Offer enterprise agreements. In many 
organizations, multiple business units 
have separate contracts with the same 





supplier. You will want to 
reward suppliers that offer 
enterprisewide deals with- 
out being asked. 

6. Find creative ways to 
meet customer objectives. 
For example, a software 
supplier could offer annual 
rental contracts, rather 
than perpetual licenses, to 
flatten customers’ spend- 
ing. Similarly, if a product 
is easy to install, the sup- 
plier could offer potential 
customers a free trial. 

7. Adopt a long-term per- 
spective. CIOs who con- 
tract with IT suppliers 

usually take a multiyear perspective 
due to the impact on the infrastructure 
and the high cost of switching suppli- 
ers midstream. Similarly, CIOs need 
suppliers to broaden their perspec- 
tives beyond end-of-quarter concerns 
and focus on building effective long- 
term relationships. 

8. Communicate effectively. The CIO 
needs concise reports on key mes- 
sages. Status changes, especially bad 
news, should be communicated imme- 
diately to give the customer time to 
make necessary adjustments. No one 
can afford to be blindsided by bad 
news — especially a CIO, whose suc- 
cess is greatly impacted by the perfor- 
mance of critical IT suppliers. 

9. Deliver on their commitments. Look 
for suppliers willing to earn your trust 
by doing what they promise, when 
they promise, at the agreed-upon 


| price. Standout suppliers do more 


than the contract requires. 
10. Provide a consistent account team. 


Every new person the supplier adds to | 





the account team must be educated 
about your needs and culture. Staff 
continuity saves time, effort and frus- 
tration for both the IT organization 
and the vendor. 

11. Be visible and available. Beware of 
suppliers that disappear as soon as the 
product is delivered. The quality of 
the supplier’s aftermarket support is 
critical and can largely determine the 
climate for the next contracting effort. 
In one case, a vendor signed a strate- 
gic agreement with a very large cus- 
tomer. Then, for the next 18 months, 
the sales representative failed to call 
on the CIO, reasoning that the CIO 
“did not want to be bothered.” When 
the CIO tracked the sales rep down, 
the CIO told him that the contract 
wouldn’t be renewed. 

12. Use a customer-centric incentive pro- 
gram. Many suppliers’ incentive pro- 
grams reward sales efforts — at the 
expense of customer satisfaction and 
retention. Look for suppliers with sales 
and satisfied customers. Both goals 
should be reflected in an effective in- 
centive plan. Look for sales plans that 
delay part of the commission until the 
product operates successfully. 

13. Provide an executive-level feedback 
channel. A key supplier executive 
should monitor service and relation- 
ship quality. Suppliers that wait to talk 
to the customer until contract renewal 
time may find that it’s too late to ap- 
pease an unhappy customer. 

Addressing these needs will signifi- 
cantly increase a supplier’s value to 
your IT organization. Consistent de- 
livery, effective communication and 
integrity form the foundation for a 
long-term, mutually beneficial rela- 
tionship. Suppliers that demonstrate 
these characteristics are the ones to 
whom you should offer future busi- 
ness and select as trusted advisers. D 
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Later this month, 
Chief Technology 
Officer JOHN 
McKINLEY JR., 
who heads Merrill 
Lynch & Co.’s 
global technol- 
ogy and services 
unit, will leave the 
New York broker- 
age after more than four years on 
the job. McKinley was instrumental 
in crafting many key outsourcing 
partnerships, rolling out Linux in 
the data center and helping the firm 
recover quickly after the Sept. 11 
terrorist attacks. 

In the coming weeks, McKinley 
says he'll be searching for a position 
in the technology sector, where he 
got his start. He also hasn't ruled 
out starting his own company. He 
spoke with Computerworld’s Lucas 
Mearian about his experience at 
Merrill Lynch, team building and the 
future of Linux. 


Why are you leaving Merrill Lynch? 
It's been a great run being at Merrill, 
almost four and a half years. I've been 
a CTO for about eight years, first with 
GE Capital and then with Merrill. | 
think it was a great experience, but | 
cut my teeth in the systems integra- 
tion business, growing up at Ernst & 
Young. | really do want to get back to 
a frontline position, potentially an op- 
erating role in a technology company. 
The dialogues I’m having now are 
along those lines. 


Why would you want to re-enter the 
technology sector now, when it’s 
having such a hard time? | really be- 
lieve we're only into the second chap- 
ter of the technology story in terms of 
its impact on business. | really believe 
if you wait for a market space to be 
validated, the value-creation opportu- 
nity is gone. This is a sector that’s not 
for the faint of heart, but there are stili 
so many rich veins to mine in terms 


| of opportunity that it’s just too com- 


pelling to me. 


Any fields you're looking at? There 
are a number of ones I’m looking at 
now across the gamut in the software 
space, the wireless space. 


What was the most difficult thing 
you did while at Merrill Lynch? The 
most difficult thing the entire team 
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did was rebuilding the firm after 9/11, 
establishing three new trading floors 
in six days [and] rebuilding wholesale 
Portions of our global network. It re- 
quired incredible creativity, but also 
heroism and commitment. 


What do you consider your next big 
challenge? Ultimately, every experi- 
ence you do has to be a growth experi- 
ence. We're in a profession where 
50% of skilis are obsolete in three 
years. So if you're not constantly 
challenging yourself to grow and 
expand, you're doing yourself a huge 
disservice. 

The biggest litmus test for me is, 
Do | have a passion about the space 
that company is in? Do they have 
something that represents sustained 
competitive advantage? And is there 
a cultural fit? 


Considering your philosophy at Merrill 
Lynch of outsourcing anything and 
everything that can’t be done by your 


| ophy is the deal we brokered with 





in-house team, do you think they'll 
continue on that way? Your biggest 
sustaining contribution to an organiza- 
tion is the talent base you developed 
over your tenure. We've got the best 
technology team on Wall Street. | think 
that mastering being a virtual organiza- 
tion is something we've worked hard at | 
over the past few years, and it's some- 
thing that will continue going forward. 
It just makes too much sense. 

It's all around looking at [business 
process outsourcing] opportunities, 
partnerships at the infrastructure level 
and next-generation ASP opportuni- 
ties. For us, an example of our philos- 


Thomson Financial to put in all new 
broker technology. | think you'll see 
more plays of a similar nature going 
forward. 


Will you also try to start virtual Web 
partnerships with other providers 
wherever you go? I'm a fan of lever- 
age, and | think partnerships with 





| contribution to an 


world-class providers at the infrastruc- 
ture level, at the application level and 
at the services layer all make a ton of 
sense. They'll certainly be the blades 
in my Swiss Army Knife going forward. 


If there’s something you could share 
with others, what would you say 


| you have learned as a CTO? A lot 
| of the best practices in managing a 
| technology function can be stolen 


from the business playbook. Great 
organizations are value-based. People 


Your biggest 
sustaining 


organization is the 


| talent base you 


developed over 
your tenure. 
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| JOHN MCKINLEY, CTO, 


MERRILL LYNCH & CO 





who share a common set of values, 
understand [how to] reward behaviors 
and understand what dials to turn 
in terms of progressing their own 
careers. Doing a few things well is 
a winning playbook. 

If we look back at the period of 
97 to 2000 - that technology exuber- 
ance era ~ | think in our profession we 
were probably not very good portfolio 
managers. We wound up working 
on the A-list but also were working on 
the B-list and half the C-list. | think that 
leads to lackluster benefits. You spread 
your talent base [and] your resources 
too thinly. 

| think the third thing is that it’s all 
around focus on measurement and 
making sure you have the right infra- 
structure in place for everything, from 
service quality to fully understanding 
your unit cost of service delivery. 

Ultimately, if you can't measure it, 
you can’t improve it. Investing in your 
processes and your infrastructure sup- 
porting IT as a business is critical. 


| How big a role do you see Linux play- 





ing in companies like Merrill Lynch? 
It's a vendor-agnostic technology 
which provides a lot of opportunity 
for tapping into innovation from multi- 


ple suppliers, but it’s also about man- 
| aging your cost base more effectively. 
| | think that Linux is powerful because it 


scales up and scales down. You can 
get a scaled-down Linux kernel in a 


| 400k footprint. At the same time, you 
| can run 136,000 transactions on a 


Linux cluster 


Do you see Windows really losing out 


| to Linux in the future? To me, it’s all 


around maintaining choice. The one 


| thing | can guarantee is Linux will be 
| an important tool at Merrill over the 
| next 10 years 


Ultimately, | like to have choice with 
Linux, and | think our vendors perform 
better when there's a better competi- 


| tive dynamic. And | think Linux helps 


foster a sense of competitive dynamic 


| among all my vendors. D 
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The Challenge: 


Find a single technology partner to heip manage growing IT needs and ensure 


commitment to exceptional client service - all without hiring additional IT staff. 
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The Solution: 


The firm standardized on Gateway 450 notebooks featuring the Mobile Intel” Pentium” 


4 Processor-M for auditors and partners, with customized desktops for office-based staff. 
Network powered by Gateway 980 servers and backed by 24/7 tech support and 


on-site service’. 


The Result: 

Powerful mobile technology keeps employees in the field connected and productive. 
Streamlined operations and responsive support boost end-user efficiency and reduce 
deployment time. Director of IT can manage firm's growth, allowing firm to focus on 
their client’s growth. 


Mike Davis, Director of Information Technology 


the reliability of 
Gateway* 450 Series 
Featuring a Mobile intel’ Pentium’ 
4 Processor-M, the Gateway 450 
notebook with wireless network 
capabilities delivers performance, 
portability and affordability. 
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(800) 622-1108 ext. 6596 
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Cybernet has created the most common sense PC ever. 


Zero-Footprint-PC™ 
with LCD flat screen monitor 


PACKAGE # ZPC-2030 INCLUDES 
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Windows XP Home Edition 


od 
as 
« Oe ee el oe 8 ee | 


sae 


EM ed 


Wondering how we were able to put an entire 
PC BOX inside a normal size keyboard? 


Smart design and common sense. 
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All Zere-Footprint-PC Elite-ll models come standard with: Intel 

Pentium Il processor or Intel Celeron processor with 64 MB RAM 

upgradeable to 1GB, 40GB IDE-7200RPM hard disk (upgradeable 

to any size, std. 3,5" IDE). 10/100 ethernet (LAN). 2 Serial 

1 parallel, 4 USB and 2 PS/2 ports. 3D AGP video. 1 PCI 

expansion slot. built in speakers and 3D sound 
. all backed by a 2 year warranty 
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Zero-Footprint-PC is ideal for IT managers or 
any individual PC user looking to save space. 
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IT Careers in Cyber Security 


SQL Slammer, the worm that infected the Internet on 
Jan. 27, proved a grim reminder of how cyber terror- 
ism can affect us. ATMs wouldn’t dispense money, 
healthcare facilities lost file search capabilities, and 
messaging worldwide slowed to a crawl. 


“(The Slammer) showed how dependent we’ve 
become on the Internet but how fraught with 
problems its security is,” says Federal ClO Council 
member Ira Hobbs, deputy CIO for the U.S. 
Department of Agriculture. Hobbs, who works on the 
council’s human capital committee, says the group 
has identified cyber security, solution architecture 
and project management as the most critical IT occu- 
pations to our nation’s future. “We believe the future 
is in dealing with domestic or international cyber 
terrorism, and cyber security professionals will be 
the troops,” he adds. 


Barry Thornton, co-founder and chief technology 
officer at ClearCube Technology in Austin, TX, is 
among those who agree. “Ours is a simple solution: 
deny the bad guy physical access to the hardware 
and the network,” says Thornton of ClearCube’s 
products. Encryption solutions will be the work of 
mathematicians, he claims, which leaves companies 
such as ClearCube to develop solutions that prevent 
outsiders from penetrating a network. 


Loronix Inc., a company head- 
quartered in Durango, CO that 
uses digital signal processing 
(DSP) to provide video security 
solutions to retail, transportation 
corporate, gaming and enter- 
tainment, and correctional and 
government facilities, seeks 
Firmware Engineer to work in 
Durango to analyze, design 
program and modify software 
using high-level languages and 
assembly for desktop proces- 
sors and DSPs. Requires bach- 
elor's degree in Electrical 
Engineering or Computer 
Science; one year as a Software 
Engineer using Digital Signal 
Processing (OSP) and video 
compression; working knowl- 
edge of JPEG, MPEG-2, MPEG- 
4, Wavelet Video Compression 
Computer Vision and code opti- 
mization techniques in C++ and 
Assembly languages. Respond 
by resume to Barbara Arndt 
Loronix Inc. 1120 W. 122nd 
Ave., Suite 200, Denver, CO 
80234 and refer to job #4257KA. 
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Software engineer wanted 
by Japanese mobile con- 
tent services co in San 
Francisco. Design/devip 
wireless applications; con- 
fer w/engnrs in Japan re 
prodct design. Java 
(Serviet, JSP, JDBC) C, 
C++, HTML, Javascript, 
CGI, UNIX, Oracle, 
Postgres SQL, SQL, DB 
Design, DB Tuning. Must 
be fluent in Japanese lan- 
guage. Resumes to Faith 
West Inc., 500 3rd St, #410, 
San Francisco, CA 94107. 
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The issue is finding IT experts in cyber security. 
The Naval Post Graduate School now offers a 
master’s degree program, and the Home Cyber 
Corps is a federally funded program, through 
the National Science Foundation, that is 
building teaching and accreditation capacity 

at colleges and universities throughout the 
country. Until this training capacity builds, 
Thornton and Hobbs have a list of skills for IT 
professionals interested in cyber security. 


“They need a background in hardware and 

software, project management skills, good 

analytical skills and intrusion detection skills,” 

says Hobbs. It’s the intangible competencies 

that set cyber security professionals apart — what 
Hobbs calls the investigative bent and Thornton calls 
simple imagination. “When | interview an engineer, 
my main interests are in his or her passion for the 
art,” adds Thornton. “There is little or no ‘prior art’ for 
the engineer to draw upon, so imagination must take 
over. Anything controlled by software can eventually 
be hacked so this is an intellectual game where the 
guy with the best imagination, at that time, wins.” 


The luster on cyber security careers continues to 
build. Hobbs says every federal agency has new IT 
security reporting requirements. His agency, the 


PROGRAMMER ANALYST: VA 
based IT consulting co. has 
immed. need for Prog 
AnalysvSystems support tech 
for its Raleigh, NC office to pro- 


Senior IT Consultant - Atlanta, 
GA. Plan & direct implementa- 
tion & customization of ERP 
(Enterprise Resource Planning) 
systms to fit clients’ business 


USDA, currently employs 6,000 IT professionals. 
“Right now, for me, this (building people capabili- 
ties in cyber security) has been my world,” he adds. 
“Three to five years from now we'll be dealing with 
cyber issues we can’t imagine now.” 
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Nancy J. Percival, Director, Recruitment Advertising 
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SOFTWARE ENGINEER: Testing. 
implementation and customize new 
software in different operating sys- 
tems. Deploying desktops and lap- 
tops with applications and network- 
ing in LAN and WAN. Ability to 


Sr. Technical Consultant: Resp- 
onsible for working with cus- 
tomers and systems Integration 
partners. Lead business scopes 
and design workshops, develop 


vide tech. support, design, code. 
test, & maint. applicatns for new 
hire reporting programs. Duties 
incl: Daily OS Support, network 
operatns, Windows 95/98/2000 
profi, Windows NT/2000 server, 
new hire reporting website mod- 
ificatns using ASP, IIS, & SQL 
server 2000, design & monitor 
disaster recovery & backup pro- 
cedures, & firewall admin 
Successful candidate will have 
bach. deg. in programming, 
comp. sci or rel. discipline, & 1 
yr relevant exp.Must demon- 
strate professionalism to handle 
tech. assistance requests from 
client cos. Must be willing to 
accept 24x7 on-call support 
responsibilities for production 
systems 


Resumes to: Christopher Meike 
Pres, Systems Research & 
Development. Inc 25304 
Ripieys Field Dr., S.Riding 
VA20152 or email 
resumes@sysrad.com 


Millennium International 
Accounting Software Developer 


Developing Web Enable 
Accounting Software Packages 
using Java, C, C++, VB, VB 
Script according to client 
requirements 


Requires: 3 yrs. Exp in Software 
Development. Must demon- 
strate knowledge of 1) account- 
ing: preparing trial balance, jour- 
nal entries, profit & loss, bank 
reconciliation, balance sheet. 2) 
JavaScript, JSP, HTML, C, C++, 
VB, VB Script, object oriented 
design/development techniques, 
integration design, software test- 
ing/debugging skills; SQL and 
Access, Toad, SQL Station. Fax 
Resumes to Kapil at 801-771- 
2380. 


needs. Consult w/managerial & 
systms analyst personnel to 
clarify needs, identify problems 
suggest changes, & determine 
extent of prgmg & coding reqd 
Manage IT personne! in dvipg 
maintaining, improving & sup- 
porting ERP s/ware impiementa- 
tion projects. Modifies proce- 
dures to increase efficiency &/or 
adapt to new reqmts using ERP 
systms. Supv overall dvipmt of 
prgms. Supv & train subordi- 
nates in ERP systms dvipmt 
Proposes ERP systms to clients 
in achieving bus solutions. BS in 
Comp Sci or Engg (or foreign 
equiv) & 5 yrs exp in ERP 
systms dvipmt, incl 2 yrs project 
mgmt exp. $75K. Resumes to: 
Vedic Group, H.R., 14202 
Parkview Lane, Alpharetta, GA 
30005. 


Oracle Dbase Administrator 
Install, up-grade, migration 
maintenance & performance 
tuning Oracle 8.x/8i/9i & Oracle 
R11/R11i on NT & Unix; dbase 
sizing, cloning & recovery strate- 
gies; program in PL/SQL, SQL 
Developer 2000 (2.x/6.x/6i) & 
Siebel 


Senior Siebel Developer. 
Design-configure BC, BO, 
applets, views using Siebel 
Tools, Smart Scripts, VB or E- 
scripting; EIM date loading; pro- 
gram in Oracle 7.x/8.x, PL/SQL 
Seagate Reports, Java, & 
Developer 2000 


Requires Bachelors Degree 
CS/MIS/iT; 2 years FT paid 
experience with software & 
duties above 


Email cio@e-comsupport.com 


manage and schedule the in: 

tion, maintenance and support o' 
different business applications 
Ability to work with Windows95, 98 
NT and windows 2000, Manage 
and schedule installation, mainte- 
nance and support of Remote Ac- 
cess hardware and software. Job 
duties are to Analysis of current 
procedures and problems to refine 
and convert the data to program- 
mabie form: determine output re- 
quirements; study existing systems 
to evaluate effectiveness; upgrade 
systems presently in use, develop 
test and implement new software 
observe functioning of newly impie- 
mented system and programs for 
trouble areas; correct systems/pro- 
grams as necessary. Requires 
Bachelors in Engineering with 2 
years of software development 
experience. 40 hours p! er week at 
$56,800 per year. Please send 
resume to Case # 200113807, Lab- 
or Exchange Office, 19 Staniford 
Street., 1st floor, Boston, MA 02114 


Openings for following positions. 
Software Engineer (SAP); perform 
SAP design, development, analy- 
sis, coding, testing. Work primarily 
in SAP R/3, ABAP/4, WORKFLOW 
and SAP Scripts. 

Software Engineer: involved in fuil 
life cycle from gathering user re- 
quirements to implementation and 
testing. Perform software design 
and development using primarily 
Websphere, VisualAge, MQ series 
and DB2. 

Software Engineer: perform design. 
implementation, customization and 
support of BaaN ERP solution 
Design, develop and deploy Ad- 
vanced Planning Solutions. Work in 
BaaN, ERP Enterprise Planning, 
Order Management, Warehousing 
and BaaN tools. 

Apply to: Kaltech international 
Corp, Attn: HR Dept, 3965 Stone 
Village Court, Duluth, GA 30097 
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test and deploy billing solutions 
using MetraTech's methodology 
and products. Responsible for 
obtaining and analyzing product 
and integration requirements. 
business object functionality 
and integration with provisioning 
and customer care systems. 
Will use knowledge of Visual 
Basic, NT, COM, MS-SQL 
Server, C/C ++, Java and 
Oracle. Requires: Bachelor's 
Degree in Comp. Sci., Engin- 
eering or other quantitative field 
and 5 years experience in pro- 
gramming. 40hrs/wk (8:00 a.m 
to 5:00 p.m.); $85,561.00/yr 
Send two resumes/responses 
to: Case Number 200114043 
Labor Exchange Office, 19 
Staniford Street, 1st Floor. 
Boston, MA 02114 


Oracle Database Administrator 
wanted for pos in Manchester. 
NH. Resp for d/base admin & 
oversight of data load process: 
maintain d/base security; install 
& maintain Oracle server & 
patches: tune & monitor d/base: 
schedule & monitor backups. 
recover & trouble-shoot; using 
PL/SQL & Syncsort, preprocess 
data for loading into Oracle 
d/base; create & maintain 
PL/SQL scripts; write PL/SQL 
prgms; work w/Siebel team to 
resolve mapping & data produc- 
tion issues using Siebel EIM 
dvip PERL prgms to decode 
data & extract into other files in 
reqd formats. BS in Comp Sci or 
an Engg field & 5 yrs d/base 
admin exp inci at least 4 yrs 
Oracle d/base exp. Send 
resume to Health Dialog, Inc. 
60 State St., 11th Floor, Boston. 
MA 02109. 
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EMAIL ADMINISTRATORS: 
Duties include: Under geneial 
supervision, the Electronic Mail 
Administrator is responsible for 
the administration of corporate 
E-Mail systems and other mes- 
saging systems. Duties include 
plan, develop, document, and 
implement enhancements to E- 
fail network; monitor, analyze 
and make recommendations on 
system configuration, network 
operations and utilization; imple- 
ment required back-up and 
security software, hardware and 
procedures; tesi, maintain and 
troubleshoot software and net 
work problems; configure soft- 
ware for LAN systems and work 
stations; and evaluate available 
hardware and software to make 
recommendations of products 
for end users. Demonstrates 
aptitude towards probiem identi- 
fication, resolution and compre- 
hension and interpretation of 
technical procedures Min 
Reqts: BS/BA (foreign equiva- 
lent accepted) in CS, IT 
Engineering or related field of 
study AND 2 years of experi- 
ence in the job offered OR 2 
years experience in related 
occupation as a network or com- 
munication administrator or 
related occupation. PLUS, must 
have demonstrated knowledge 
and work experience with: (1) 
Messaging systems, technolo- 
gies and standards (2) 
Operating systems; and (3) 
Windows NT Server 
Workstation, Lotus Domino and 
Notes Administration. Basic pay 
is $40,000 per year FT and stan- 
dard company benefits. EEO. 
Submit 2 resumes and respond 
to Case No. 200115602, Labor 
Exchange Office, 19 Staniford 
Street, 1st Floor, Boston, MA 
02114, 


SDG Corporation 
Seeks software professionais to 
work in West Chester, Ohio with 
experience in any six of the fol- 
lowing technologies: Oracle 
LDAP, Unix, MS, SQL server. 
Java,Web Logic, Rational Rose 
Apache and Planet Server 
Oracle Application DBA 
(Norwalk, CT.), required experi- 
ence in team leadership, design- 
ing and administering Oracle 
ERP, and distributed database 
architecture solutions under 
Windows NT. and = Unix 
Relocation within USA possible 


Security Architect: (Norwalk CT.) 
required experience in design- 
ing, implementing and managing 
networks based on NT, Unix and 
Novell including design and 
implementation of network secu- 
rity systems. Relocation within 
USA possible 


Oracle Applications DBA 
Norwalk, CT. Require experi- 
ence in team leadership and 
designing and administering 
Oracle ERP and distributed 
database architecture solutions 
under Windows NT and Unix 
Relocation within USA Possibie. 
Attractive compensation pack- 
age 


Attractive compensation pack- 
age. Send resume to Catherine 
Fanucchi @ SDG Corp., 65 
Water Street Norwalk, Ct 06854 


Vision Consulting USA, Inc., an 
international information tech- 
nology consultancy firm is seek- 
ing qualified applicants for the 
following position 


Software Engineer: Develop 
proof-of-concept and prototype 
solutions; change management 
quality assurance process for 
increased functionality. Regre- 
ssion testing 


Bachelors or Foreign Equivaient 
in a Computer/Engineering Sc. 
discipline with relevant experi- 
ence 


Resumes only to: Annia St 
Hillaire, HR, 110 East 42nd 
Street, Ste 615, New York, NY 
10017 
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PROGRAMMER/ANALYST 
sought by LIC, NY-based mat- 
tress/sleep prods - wholesale/ 
retail estb. to analyze, dsgn & 
dvip client/server database info 
systems & customized appl. 
using Oracle, Clipper and 
FoxBase. Formulate test plans 
through dvipmt cycle & integrate 
diff. dvipmt platforms. Must have 
Bach Deg in Comp Sci or equiv 
& 2 yrs exp. in job offd. Must be 
exp'd in Oracle R11.0, PL/SQL, 
dBase lil & FoxBase & must 
have exp. customizing Oracle 
d/base & forms for retail estb 
Send resumes to: VP Quality & 
HR, Dial-A-Mattress Operating 
Corp., 31-10 48th Ave., L.1.C 

NY 11101 


FundQuest, Inc. is looking 
for a Database Admini- 
strator to administer and 
architect financial invest- 
ment management data- 
bases on SQL 2000 
Enterprise Server clustered 
on Windows 2000 
advanced server. Please 
send all resumes to 
FundQuest Inc., 21 
Custom House Street, 
Boston, MA 02110, atten- 


|tion Human Resource 


Department 


Market-Research Database De- 
signer: Design/manage direct 
marketing market-research d’- 
base. Establish research struc- 
ture; gather locai, regional, nat, 
internat. market cond data/deter- 
mine potential sales using know!- 
edge of market resch methodolo- 
gies; develop data storage/analy- 
sis/forecast sys; prep reports on 
competitor strength/cust pref 
8:30a-5:30p. Req: Bach Bus 
Admin in Economics/Finance & 1 
yr exp or as Tech MIS Coord &/or 
Web Developer. Resume: T 
Killebrew, Smarttarget Marketing 
725 Broad St, Augusta, GA 30901 


DATA MANAGEMENT ASSOCI 
ATE (DATABASE DEVELOPER) 
sought by pharmaceutical research 
and development company in 
Wallingford, CT. Candidate must 
have a minimum of a Bachelor of 
Science degree in Applied Mathe- 
matics, Statistics or Computer Sci- 
ence (with coursework in applied 
mathematics or statistics). Know- 
ledge of data management and 
process data collection and evalua- 
tion a plus. Strong ieadership and 
communication skills required 
Send resumes to: Strategic Staffing 
Specialist, Job Code TN-684 
Bristol Myers Squibb Co., P.O. Box 
4000, Mail Stop E14-12, Princeton 
NJ 08540. 


VP, Senior Systems Engineer 
sought by NY based Dealer 
Broker and Financial Investment 
Company Must possess 
Bachelor's Degree or equivaient 
in Computer Science or directly 
related field and 5 years experi- 
ence in network management 
design and analysis within a 
UNIX (Solaris), Windows NT 
and Cisco operating system 
Working knowledge of TCP/IP, 
LAN/WAN, C/C++, Java or Peri 
Respond to: Human Resources 
Department Commerzbank 
Securities, 1251 Avenue of the 
Americas, New York, NY 10020- 
1104 
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Optimization Implementation 
Analyst. Optimize collaborative 
logistics solutions developed in 
internet native architecture, multi 
tenant models w/on demand 
scalability & device & protocol 
independence & zero fault secu- 
rity; form math models for opti- 
mization apps & develop algo- 
rithms to solve models; develop 
heuristic & local search algo- 
rithms for vehicle routing prob- 
lems in C++ & using |LOG Opt 
Suite Libraries & TMS Opt. C++ 
J2EE, XML & Oracle. Deliver 
via SOAP & JNI/RMI. Req: MS 
Comp Sci & grad edu in 
Algorithm & Data Structure 
Resumes to: M Cannady, 
Elogex, Inc, 200 South College 
St. #2000, Charlotte, NC 28202 


Software 
Engineers wanted 
w/BS & 2 yrs. Exp. 
in New Jersey. 
Send resume to: 
HR Dept., Scicom 
Americas, inc., 
1500 S. Dairy 
Ashford, Ste 241, 
Houston, TX 
77077. 


Systems Analyst sought by 
s/ware co. w/expertise in 
Acctg, Financials & Order 
Processing to dsgn, dvip & 
impimt systems; exp reqd in 
AS/400, RPG/400, CL/400, 
DB2/400 & Oracle; VB & 
Scripting exp a+. Reqd BS 
in CS/Engg/related area + 3 
yrs exp in job offd 
Competitive salary & bene- 
fits. Reply to HR, Cosmonet 
Solutions Pvt. Ltd, 406 
Farmington Ave, 
Farmington, CT 06032 


Programmer/Analyst / Software 
Art Corp., a software-consulting 
firm, requires software profes- 
sionals with demonstrated 
hands-on experience in the fol- 
lowing: Unix System Admins 
Sun/HP Client Server: MS VB 
NET, ASP .NET C#/C++/Oracle 
PL/SQL/Sybase/Windows/Unix | 
nternet Computing JAVA/ 
CORBA/XML, JAVA Websphere/ 
Weblogic OOPQA Testers 
Manual/Automated, JD Ed- 
wards. SAS Programmers. 
Technical Recruiter local to NJ 
Send resume to 


nicky@softwareart.com 


Software Consulting firm seeks 
Programmer Analysts: Analyze 
reqmts, create dsgn documents 
& translate to prgmg, coding & 
testing s/ware applics. Must 
have exp working w/OPUS 
Systm (CMACntrl) EDI 
WebMethods, J2EE, WebLogic 
Oracle 8i, PowerBuilder (4.0- 
8.0), Java. Erwin, Wir NT 
Competitive salary plus benefits. 
Req BS/equiv in CS/related area 
w/3 yr exp, 2 of which shid be 
wiin last 3 yrs. Send resumes to 
HR at Global Technologies 
Group, Inc., 74 Main Street 
Framingham, MA 01702 


Software Engineer. Responsible 
for designing, developing and test- 
ing of distributed financial soft- 
ware applications including re- 
searching financial algorithms and 
software techniques; selecting 
technologies for projects; develop- 
ing product prototypes; providing 
efficient Object-Oriented design 
preparing timeline estimates; cre- 
ating efficient and reusable soft- 
ware with programming lan- 
guages; and debugging and test- 
ing the software to minimize errors 
at pre-QA stage. Must have 
Bachelor's in Computer Science. 
Electrical Engineering or equiva- 
lent, two years experience, and 
knowledge of C++ using ad- 
vanced Object-Oriented tech- 
niques; MS SQL Server, DHTML 
XML, and Windows 95/98/NT/ 
2000 programming platform; and 
COM/Active X Technology and 
programming for multiple platforms 
and creating user-friendly GUI 
Send resume with cover letter to 
Pinnacor, Attn: Bob Butler, 2600 
Crosspark Rd., Coralville, IA 
§2241 


Database Administrator. 8a-5p. 
40 hrs/wk. Analyze data & 
d/base structure; configure, test, 
impimt, monitor, do performance 
tuning, backup & recovery using 
Enterprise Oracle, Oracle 9iAS 
VAX/VMS, Kron shell, Perl & 
UNIX. Educ: BS or equiv in 
Comp Sci or Engg, Info Systms 
Mgmt Electrical/Electronics 
Engg or related field. Exp: 2 yrs 
exp in job offd or as S/ware Engr 
or Systems/Prgmr Analyst using 
above computer skills. Resume: 
Software Decisions Group, Inc. 

235 Donamere Way, Alpharetta, 
GA 30022 


Programmer Analyst. Im- 
plement S/W, distribute & 
database appl. Using Visual 
Basic, Visual C++, Java, 
NET & Perl server techn., 
SQLServer, Oracle & Ac- 
cess & web based appl. On 
the internet / Intranet. Req: 
BS in Comp. Sci., Comp 
Eng., or related Eng. 40 
hrs/wk. Job/Interview Site 
LA, CA. Send resume to 
Aaxis Group LLC, 6399 
Wilshire Bivd. #914, LA, CA’ 
90048 


System analysts, Client Server 
Database Administrator wanted 
Qualified applicants must have 
BS plus experience using 
Oracle database, Unix Sun 
Solaris, must be authorized to 
work in US. Apply at St. John 
Hospital, 22101 Moross Road 
Detroit, Mi 48236. EOE 


Programmer/System Analyst 
wanted by GalaxyPlus, leader in 
tech products to credit unions 
Qualified candidates must have 
at least BS degree. Exp of XML, 
1BM AIX, Socke/TCP, C, DG 
SQL. VB, AOS/VS, JavaScript 
CSS, DHTML is plus. Apply at 
ichism@galaxyplus.com. EOE 


NEED TO HIRE? 
START WITH US! 


\Tcareers and ITcareers.com 
reach more than 2/3 of all US 
IT workers every week. If 
you need to hire top talent, 
Start by hiring us 


Call your ITcareers Sales 
Representative or Nancy 
Percival at 
1-800-762-2977, 


ITCAREERS 


where the best get better 


SIO e 
NETWORK WORLD, 
COMPUTERWORLD, 
AND INFOWORLD 
HELP YOu Do 
A BETTER JOB. 


Now-Let Us HELp 
You GET ONE. 


CALL: 


1-800-762-2977 


@ careers 





@ careers.com 


leading design, development, 
maintenance, and documenta- 
tion of Web portal 

analysis, system design, and 
system architecture; program in 
Java, JavaScript, C/C++, and 
Oracle; identify areas of risk and 
present mitigation plans; 
demonstrate expert understand- 
ing of systems design and 
development, technology sup- 
port, and data processing stan- 
dards; provide consulting ser- 
vices for technical business 
opportunities; train business 
units; and assist junior staff 
Minimum requirements: Mast- 
er's in Computer Science, 
Engineering, or related field. No 
experience necessary. Will also 
accept Bachelor's +5 years pro- 
gressive experience in field. 
Must have unrestricted autho- 
rization to work in U.S. M-F, 
9am-5pm, 40+ hrs/wk. Salary 
range: $95,600 - $119,500/yr 


Exchange Office, 19 
Staniford St., 1st Fi., Boston, MA 
02114. 


Trusted by 
more 
hiring 

managers 

than any IT 

J ey= loom am dats 
world. 


Ems 


System Specialist (Boston, MA) 
responsible for design, develop- 
ment, maintenance, and docu- 
mentation of business systems. 
Will engage in analysis. system 
design, and system architecture; 
utilize Java, JavaScript, C/C++, 
and Oracle; demonstrate thor- 
ough knowledge of systems, 
interfaces, dependencies, ser- 
vice level requirements, opera- 
tional functions, business prod- 
ucts and services supported 
provide consulting services for 
technical business opportuni- 
ties; and train business units. 
Minimum requirements: Mast- 
ers in Computer Science, 
Engineering, or a related field. 
No experience necessary. Will 
also accept Bachelor's +5 years 
of progressive experience in 
field. Must have unrestricted 
authorization to work in U.S. M- 
F, 9am-5pm, 40+ hrs/wk. Salary 
range: $75,000 - $90,000/yr. An 
EOE. Send 2 copies of resume 
to Case No. 200115535, Labor 
Exchange Office, 19 Staniford 
St., 1st Fi., Boston, MA 02114 


SOFTWARE ENGINEER to design, 
develop and deploy multi-tier appli- 
cation software using EJB, JSP, 
HTML, XML, XSL, Java Serviets 
and Oracle on SUN Solaris and 
Windows platforms; Install, config- 
ure, set up, tune and maintain 
applications and web servers on 
SUN Solaris platforms using BEA’ 
Web Logic Server, Java, UML, 
OOAS, XML, Korn Shell, iPlanet 
Web Server and C++. Require 
B.S. degree in Computer Science. 
an Engineering discipline, or a 
closely related field with five years 
of progressively responsible expen- 
lence in the job offered or as a 
Programmer/Analyst or Program- 
mer. Extensive travel on assign- 
ment to various client sites within 
the U.S. is required. Competitive 
salary offered. Send resume to: 
Roz L. Alford, Principal, ASAP’ 
Staffing LLC, 3885 Hoicomb Bridge 
Rd., Norcross, GA 30092; Attn: Job 
SM. 


e-lite companies 


e-merging companies 


e-ssential companies 


e-normous opportunities 


gp) Careers.com 


where the best get better 


1-800-762-2377 





IT CAREERS 


SOFTWARE ENGINEER to 
design, develop and implement! 
web-based application software 
and user interfaces using Visual 
Basic, VS.NET, ASP.NET, C#, 
VB.NET, ADO.NET, XSD, Active 
X, COM, OLE-DB, ODBC, 
COM+, ADO, ASP, VBScript, 
JavaScript, VBA, XML, XSLT. 
HTML, DHTML, TOAD, PL/SQL, 
Visual InterDev, iS, MTS and 
Visual Source Safe on Windows 
platforms; Design and develop 
various web-based _ reports 
using Crystal Reports, Oracie 
and SQL Server. Require 
Master's degree in Computer 
Science/Engineering, 
Mathematics, or a closely relat- 
ed field with two years of expe- 
rience in the job offered or in the 
related occupation of Progr- 
ammer/Systems Analyst. Exten- 
sive travel on assignment to var- 
ious client sites within the U.S. 
is required. Competitive salary 
offered. Apply by resume to: 
Leena Bhakta, Alpha Computing 
Solutions, LLC, 5865 Jimmy 
Carter Bivd., Suite 125, 
Norcross, GA 30071; Attn: Job 
KB. 


SENIOR PROGRAMMER/ANA- 
LYST (2 positions) to lead a team 
in the analysis, design, develop- 
ment, testing, implementation 
and support of cross-platform 
architecture bridging operating 
systems, including UNIX and 
Windows NT, for distributed ap- 
plication development and cross 
browser environments using 
UML, Java, C, C++, lex, yacc 
bison, Peri, UNIX Shell, XML 
Serviet, EJB, J2EE, CORBA, 
DHTML, JavaScript, Orbix and 
Oracle; Mentor junior program- 
mers. Require: Bachelor's degree 
in Computer Science, an Engin- 
eering discipline, or a closely 
related field with two years of 
experience in the job offered or 
as a Systems Engineer. Exten- 
sive travel on assignment to vari- 
ous client sites within the U.S. is 
required. Competitive salary 
offered. Send resume to: Roz L 
Alford, Principal, ASAP Staffing 
LLC, 3885 Holcomb Bridge Rd. 
Norcross, GA 30092; Attn: Job 
PS. 


The Nasdaq Stock Market® is the 
largest and fastest growing stock 
market in the United States, listing 
over 4,100 of the worid’s most inno- 
vative companies. We are currently 
sourcing for Information Systems 
Auditors in Trumbull, CT. to conduct 
information technology and busi- 
ness process audits for on-line! 
securities trading systems in 
Oracle, SQL and other RDBM envi- 
ronments under UNIX, Tandem and 
Windows NT O/S. 


Candidates must have at least 4 
years experience in audit/risk 
assessment of business/financial 
systems in the financial services 
sector, have an MS degree in 
Computer Science or Mathematics 
land be a CISA. Please submit 
resumes to: Nasdaq, Human 
Resources, 1 Liberty Plaza, 49th 
Floor, New York, NY 10006, Attn: 
HR Recruiter. We are an equal 
opportunity employer. 


NEED TO HIRE? 
START WITH US! 


ITcareers and !Tcareers.com 
reach more than 2/3 of all US 
IT workers every week. If 
you need to hire top talent, 
Start by hiring us. 


Call your ITcareers Sales 
Representative or Nancy 
Percival at 
1-800-762-2977. 


ITCAREERS 


where the best get better 


Jaypar, Inc. 
Seeking !T Professionals 


+ Programmers/Analysts 
* Software Engineers 


Experience and skills in most of 
the following areas are 
required 


Java, J2EE, EJB, .NET, ASP, 
VB, VC++, XML, BroadVision, 
WebLogic, Sun Enterprise/ 
Ultra/Sparc, SQL*Plus, PL/ 
SQL, SQL*Loader, Oracle 
Forms and Reports, Oracle 
Applications viz. Financial, 
CRM 


B.S., B.E., B.Tech, M.S. or 
MCA, with good understanding 
of programming, web technoio- 
gies and databases are essen- 
tial. At least three years of prior 
industry experience is a must. 
Excellent communication and 
presentation skills a must. 
Applicant must be open to fre- 
quent travel and relocation 
Send resumes to Attn: Human 
Resources at 3730 Garand 
Road, Ellicott City, MD 21042 
NO PHONE CALLS PLEASE 


System Specialist (Boston, MA) 
responsible for design, develop- 
ment, maintenance, and docu- 
mentation of business systems. 
Will engage in analysis, system 
design, and system architecture; 
utilize Java, JavaScript, C/C++ 
and Oracle; demonstrate thor- 
ough knowledge of systems 
interfaces, dependencies, ser- 
vice level requirements, opera- 
tional functions, business prod- 
ucts and services supported; 
provide consulting services for 
technical business opportuni- 
ties; and train business units. 
Minimum requirements: Mast- 
ers in Computer Science, 
Engineering, or a related field. 
No experience necessary. Will 
also accept Bachelor's +5 years 
of progressive experience in 
field. Must have unrestricted 
authorization to work in U.S. M- 
F, 9am-5pm, 40+ hrs/wk. Salary 
range: $70,000 - $90,000/yr. An 
EOE. Send 2 copies of resume 
to Case No. 200115536, Labor 
Exchange Office, 19 Staniford 
St., 1st Fl., Boston, MA 02114 


COMPUTERIIT 

AS/400 Programmer/Analyst Req. 
Bach. degree or equiv. foreign 
educ. in Engineering or Computer 
Science & 2 yrs.’ exp. in job offered 
or 2 yrs.’ exp. using RPG, ILE, & 
CL programming languages to ana- 
lyze & design business applications. 
in an AS/400 environment. All stat- 
ed exp. must inciude serving as pri- 
mary technical liaison with applica- 
ition end-users. Must have one 
year’s exp. in each of the following. 
devel. of order processing & inven- 
tory mgmt. apps. for use in manuf 
environ.; & use of BPCS, FTP & 
Lotus Notes apps. (Exp. may, but 
need not, be concurrent.) Utilize 
RPG, ILE, & CL programming lan- 
guages to analyze & design busi- 
ness applications in an AS/400 
environment. Serve as primary 
technical liaison with application 
end-users. 40 hrs/wk. Apply w/ 
resume to: Manager, Human 
Resources, Unimin Corp. 258 Elm 
Street, New Canaan, CT 06840. 
Please reference Job #4200. 


Programmer Analyst, vary- 
ing job sites throughout the 
US. Design, develop, imple- 
ment and analyze client- 
specific software and hard- 
ware requirements using 
SAP as the client server 
base with Oracle as the 
Database and UNIX as the 
operating system. Three yrs 
exp. in job required. Send 
resume to L.R. Target 
Resources, 98 East Ave., 
Norwalk, CT 06851 


Computerworld + February 10, 2003 
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We know 
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Find out more about the rewards 
of working with AJILON. To apply 


in any of our district 


Offices, please visit website at 
www-ajilon.com 


AJILON CONSULTING 


Software Engineer. Duties: Resp 
for testing & verifying code for tele- 
com. PCS IT AD testing lab using 
automated software testing tools. 
Support testing activities for key 
develop. efforts. Develop & main- 
tain test guidelines, test cases & 
test scripts. Determine test re- 
quirements & coord. test schedul- 
ing. Perform systems integration 
tests & load testing using Segue 
Silk & Rational Test Studio. Re- 
quires: B.S. in Comp. Sci., Eng. or 
a related field & 2 yrs. exp. in the 
job offered or 2 yrs. exp. as a 
Tester, Analyst/Prog. or Prog. Will 
accept any comb. of educ. & exp. 
equiv. to a B.S. degree. Con-cur- 
rent exp. must inci. 2 yrs. exp. test- 
ing & verifying code & 2 yrs. exp 
performing systems integration 
testing. Send resume (no calls) to: 
Danielle David, CTG, Inc., 13220 
Metcalf Ave., Ste. 140, Overland 
Park, KS 66213. 


Software Engineer - Dev 
& dsgn comp software 
relating to MS comp net- 
works used in telecom. 
industry in S. & Latin 
America. BS in Electical 
Engineering, knowledge 
of MFC, MS.net Arch- 
itecture, visual C++, and 
Biztalk Server reqd w/ 2 
yrs exp. Apply to 
Personnel, Emida 
Managed Systems, LLC, 
2200 S. Dixie Hwy, #603, 
Miami, FL 33133 


ENGINEERS: Quality Control 
Engineers needed. Seeking quali- 
fied candidates possessing MS/BS 
or equiv. and/or rel. work exp. Part 
lof the req. rel. work exp. must 
include 2 years working with FDA 
GMP regulations and ISO 9000. 
Duties include: Developing and 
implementing quality assurance. 
control procedures and methods: 
performing quality analysis; cali- 
bration & validation of equipments 
& Visual & Digital Color Matching & 
Formulation for color coated 
Tablets using Spectrometer and 
Color Software. Mail res., ref. and 
sal. req. to: Alpro inc., DBA Allied 
Procoat Corp., 8555 Tonneile Ave., 
#306, North Bergen, NJ 07047 


Manager Computer Operations- 
Glendale Heights, ILL area 
irects and coordinates activities 
of workers engaged in comput- 
er operations. Plans and devel- 
ops policies and procedures for 
Carrying out computer opera- 
tions. Meets with subordinate 
Supervisors to discuss progress 
of work, resolve problems, and 
ensure that standards for quality 
and quantity of work are met. 
Adjusts hours of work priorities. 
and staff assignments to ensure 
efficient operation, based on 
work load. Reviews daily logs 
and reports to detect curing 
slowdowns or errors, using com- 
puter terminal. Consults with 
software and hardware vendors 
and other establishment workers 
to solve problems impeding 
computer processing, consulting 
and training. Meets with users to 
determine quality of service and 
identify needs for training 
Meets with data processing 
managers to determine impact 
of proposed changes in hard- 
ware or software on computer 
operations and services to 
users. Evaluates new software 
and hardware to determine use- 
fulness and compatibility with 
existing software and hardware. 


jEvaluates proposed data pro- 


cessing projects to assess ade- 
quacy of existing hardware, and 
recommends purchase of equip- 
ment. Develop budget and mon- 
itors expenditures. Minimum 
qualifications Bachelors degree 
with major field of study of 
Accounting,Business Admini- 
Stration, law, or computer sci- 
ence.; 2 yrs related occupation 
in Business Administration. 
accounting or software Dev. 40 
Hrs/wk 9:00 am to 5:00 pm, OT 
ta, salary $87,402/yr. Applicant 
must show proof of legal author- 
ity to work in US Send resume 
to: ILLINOIS DEPARTMENT 
SECURITY 401 SOUTH 
STATE STREET - 7 NORTH 
CHICAGO, ILL 60605 attn 
LEONARD BOKSA reference# 
V-IL 34153-B An employer paid 
AD. NO calls - send 2 copies of 
Both resume & cover letter 


COMPU 
informatio Specialist 
(Memphis, TN) q. a Bachelor's 
degree (or equiv. foreign educ.) in 
Computer Science or Computer 
Information Systems and 2 yrs. of 
exp. in the job offered or 2 yrs. of 
exp. in programming and systems, 
analysis for VAX cor ter sys- 
tems, including development and 
mplementation of programs using 
VAX DCL and FORTRAN on Virtual 
Memory Sys: VMS). [In lieu of 
Bachelor's degree, will accept 2 
additional yrs. of this exp. and 2 
years of university-level credit 
any scientific or technical field.) 
Two yrs. of exp. must have 
involved: programming and sys- 
tems analysis in a manufactu 
environment; and using 
FORMS and embedded 
Engage in programming and sys- 
tems analysis for VAX computer 
systems, including development 
and implementation of programs 
using VAX DCL and FORTRAN on 
manufacturing environ 
ws/wk. 8:00 a.m. — 5:00 
Send resume to Melanie 
International Paper 
Company, 4070 Willow Lake Bivd. 
Memphis, TN 38118. EOE 
Reference #0818 when applying 


Software Engineers needed 
Several senior level positions 
available for qualified candi- 
dates possessing rel. work exp. 
Part of the req. rel. work exp. 
must include 2 years working 
with C, Java and Delphi. Duties 
include: designing and develop- 
ing software applications; pro- 
gramming Avaya definity switch- 
ing and providing technical sup- 
port. Experience with Informix. 
JMF & Dialogic API's is a plus 
Mail resume, references and 
Salary requirements to: United 
Marketing Group, 929 N. Pium 
Grove Rd., Schaumburg, iL 
160173 
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Obstacles Hinder IT | 
Portfolio Management 


Investment-tracking 
approach draws 
interest, however 


BY THOMAS HOFFMAN 
SAN DIEGO 
ANY IT managers 
are keen on the 
notion of setting 
up a portfolio 
management approach to help 
gauge the value of technology 
investments. But those who 
try to do so often run into 
start-up problems, such as 
trouble getting buy-in from 
business units, according to 


Continued from page 1 
e 
Kaiser 


its own automated record sys- 
tem. David O’Grady, a Kaiser 
spokesman, said the HMO 
started that project in the mid- 
1990s because comprehensive 
off-the-shelf software didn’t 
exist then. Versions of the in- 
ternally developed system 
have been rolled out in states 
such as Colorado and Hawaii. 

But Epic has developed its 
software to the point that 
Kaiser officials believed it 
would be more cost-effective 
to switch, O’Grady said. He 
wouldn’t disclose what Kaiser 
has spent on the initial project 
but said press reports in the 
1990s pegged the expected 
cost at close to $1 billion. 

IBM spokesman John Buko- 
vinsky said his company has 
worked with Kaiser on a num- 
ber of successful projects and 
expects to continue to be in- 
volved in IT work at the HMO, 
which uses IBM’s systems and 
its DB2 database. 

Andy Wiesenthal, associate 
executive director of the Per- 
manente Federation, the na- 








attendees at a Meta Group Inc. 
conference here last week. 
Several attendees also said 
they fear that making informa- 
tion about the financial value 
of investments readily avail- 
able could make them seem 
like IT police in the eyes of 
business managers who fund 
projects. In addition, they cit- 
ed concerns that the data 
might not be fully accurate. 
Like other IT executives in- 
terviewed at the Metamorpho- 
sis conference, Jim Larkin said 
he thinks his company’s busi- 
ness-unit leaders “could bene- 


| 7 
| fit from seeing how technolo- 


Technology Details 





gy is being used and the kinds 
of payback we're getting.” 

Larkin manages application 
development information sys- 
tems at SRP, a Tempe, Ariz.- 
based utility that spends about 
$100 million a year on IT. 


| “We'd like to put an IT portfo- 


lio management practice in 
place, but we’re struggling 


| with how to pitch this to se- 


nior management,” he said. 
A growing number of com- 


| panies are adopting the port- 


folio management concept, in 
which IT projects and assets 


| are evaluated in much the 


same way that financial port- 


Kaiser Permanente’s automated medical record system will: 
@ Cost $1.8 billion to develop and contain data about all of the company's 
health pian members, who currently number 8.4 million. 
@ Be based on software from Epic Systems that integrates a data 


= Store records electronically at a central data center and use InterSys- 
tems’ Caché multidimensional database to manage transaction processing. 


tional governing organization 
for Kaiser’s medical groups, 
said it’s expected to take three 
years to fully roll out the new 
system to the health plan’s fa- 
cilities, located in nine states 
and the District of Columbia. 
When it’s completed, the 
system will let Kaiser’s health 
care workers electronically ac- 
cess the records of any pa- 
tient, Wiesenthal said. In addi- 
tion, health plan members will 
be able to use the system via 
the Internet to schedule ap- 
pointments, seek referrals or 
request prescription refills. 
Kaiser hasn’t finalized the 
system’s topology, said Wies- 
enthal. But, he added, the elec- 
tronic medical records will be 
housed in Kaiser’s Corona, 





Calif., data center and tied to 
servers in the facility that will 
handle processing for different 
regional operations. Kaiser of- 
ficials should decide by the 
end of this month whether to 
use thin-client terminals or 
PCs and workstations to pro- 
vide access to end users, 
Wiesenthal said. 

Carl Dvorak, Epic’s chief op- 
erating officer, said the com- 
pany’s software can store 


| 45,000 data elements that cov- 


er all aspects of patient care. 
Dvorak added that Kaiser’s 
system will manage all end- 
user interactions through 
Caché, a multidimensional 
database developed by Inter- 
Systems Corp. in Cambridge, 
Mass., for use in transaction- 


| 
| 





folios are [QuickLink 31864]. 

At the conference, Meta re- 
leased the results of an e-mail 
survey it conducted last 
month with 219 prospective 
attendees. A total of 56% said 
they have either launched an 
IT portfolio management pro- 
gram or plan to do so. 

Some organizations “are do- 
ing IT 10-Qs and IT 10-Ks” 
that are equivalent to the 
monthly and quarterly finan- 
cial updates that publicly held 
companies have to file, said 
Howard Rubin, executive vice 


| president at Stamford, Conn.- 


based Meta. The reports pre- 


; sent financial breakdowns of 


IT investments that are in the 
pipeline as well as existing 
systems, he added. 

But such disclosures can 
pose a problem for IT man- 
agers. “Some find the visibility 


processing applications. 

It’s unusual for a large health 
care organization to rely so 
heavily on one vendor, said 
Ralph Reyes, senior vice presi- 
dent at Klas Enterprises LLC, 
an Orem, Utah-based company 
that measures the performance 
of health care IT systems. But, 
Reyes added, Epic has topped 
Klas’ list of more than 200 IT 


; vendors for the past three 


years, based on performance 
reports from 3,500-plus health 


| care facilities. 


Thomas Handler, an analyst 
at Gartner Inc. in Stamford, 
Conn., said the Kaiser deal 
poses a challenge for Epic, 
which has annual revenue of 
about $100 million and hasn't 
worked on such a large-scale 
project before. But if the roll- 
out succeeds, it will put pres- 
sure on other health care 
providers to deploy paperless 
record systems, he added. 

Francis J. Crosson, executive 
director of the Permanente 
Federation, said the Epic sys- 
tem will help Kaiser satisfy all 
the requirements of the feder- 
al Health Insurance Portability 
and Accountability Act, due to 
take effect in April. D 


RES RSS 
Tips on launching an IT 
portfolio management 
program: 

SHOW business managers how 


the initiative could help reduce 
their technology costs. 


DIVE INTO the biggest slices of 
the IT pie first. Evaluate tech- 
nology budgets by business 
unit and by project. 


FOCUS ON the right metrics 
and choose appropriate IT 
portfolio management tools. 


BE SURE to track IT workers 
and evaluate how they can best 
be allocated to projects. 
of the portfolio very threaten- 
ing,” said Mike Metcalf, vice 
| president of marketing at Pa- 
cific Edge Software Inc., a 
vendor of IT portfolio man- 
| agement tools in Bellevue, 
| Wash. “They feel the data they 
have isn’t as accurate as it 
| should be, and they’re being 
asked to share this informa- 
| tion at a very high level.” 
Dan Jones, senior director 
| of customer-facing systems at 
ConAgra Foods Inc., said the 
| Omaha-based food processing 
company is “doing some com 
| ponents of IT portfolio man- 
agement, but we probably 
| don’t call it that.” For example, 
ConAgra has implemented 
systems for use in tracking its 
IT assets, Jones said. 
Sun Microsystems Inc. 
| launched an IT portfolio man- 
agement initiative about six 
| months ago. “One of the chal- 
| lenges I'm facing is finding a 
[software] tool that meets our 
needs and runs on Solaris,” said 
Halina Tabacek, manager of IT 
planning and practices at Sun. D 


MORE THIS ISSUE 


Be careful when choosing tools - many are 
little more than project management 
packages. Page 25 

| Meta predicts that IT spending in the 
energy industry will drop this year, but some 
technologies are ripe for growth 
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FRANK HAYES ® FRANKLY SPEAKING 


‘Tough Stuff 


NFORMATION TECHNOLOGY ISN’T EASY. It never has been. 
Sure, it looks easy when vendors trot out their product pre- 
sentations. It sounds easy when pundits and analysts tout 
technologies they’ve never tried. It even seems easy when we 
confidently set our project schedules and lay out for business- 
side managers how quickly they’ll get a return on an IT investment. 
Rigged demos and dazzling dog-and-pony shows are easy. 
Actually making IT work isn’t. It’s really, really hard. 
It’s hard because products don’t work. And technologies are mis- 
applied. And costs are hidden. And requirements are underestimat- 
ed. And admitting failure is political suicide. 


It’s hard because half the time, we don’t know 


what we’re doing — we’re trying to solve prob- 
lems in new ways, with uncertainly implement- 
ed technologies, in the face of shifting or inco- 
herent user requirements. And the rest of the 
time, we know the products we're using won’t 
really do what we need, but we still must try to 
make them work. 

And it’s hard because, as people who believe 
in technology, we’re optimists. We believe 


products will work the way they’re supposed to, 


integrate with our systems as easily as we'd like 
and meet the needs of users without a hitch. 
With each new project, we’re full of hope that 
this time everything will be right. 

But out in the real world, it almost never is. 
And the newer our technology, the more ambi- 
tious our goals and the more important our 
projects, the harder IT gets. 

Which we keep discovering when we spend 
years instead of months implementing enter- 
prise software. And when we run up against 
endless obstacles getting a data warehouse or 
application integration or Web services work- 
ing. And even when we fall far be- 
hind in installing critical security 
patches and bug fixes. 

Nothing works the way it’s sup- 
posed to. Nothing plays nicely with 
what we’ve got. Nothing is as simple 
as we were told it would be. 

If all this sounds unremittingly 
grim, keep in mind that we actually 
do deliver lots of projects. We do 
get SAP working, eventually. We do 
build distributed applications, even 
though it takes buckets of sweat and 
shaves years off our lives. We do 
solve business problems and keep 


| 





FRANK HAYES, Computer- 
world’s senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 
frank_hayes@computerworld.com. 


users increasingly productive, even though it 
always takes longer than it should. 

But are our expectations unreasonably high? 
Sure they are — fueled today not just by vendor 
sales promises, but also by glossy TV commer- 
cials, breathless magazine articles and wishful 
management thinking. And there’s not a lot we 
can do to reduce those expectations. 

Still, we have to try. 

We can do that by educating business-side 
executives and managers in just how easy IT 
isn’t. That may help a little. It’s not much, but at 
least it’s something to compete against all the 
voices outside and inside your organization 
chanting that this new product or that cutting- 
edge technology is a sure thing, a silver bullet 
and, above all, easy. 

We can also be smarter about how we ap- 
proach the hardest, most complex projects. The 
further we can break them down into simpler, 
more doable chunks, the better our chances of 
success — and of reducing surprises for execu- 
tives who expect something wonderful right 
away and end up with a long-overdue mess. 

And we can remind ourselves, 
over and over, that every new proj- 
ect requires new skills, generates 
new problems and forces new 
thinking. There will be problems, 
setbacks and sometimes even cata- 
strophic failures. We won’t succeed 
every time. 

But if we — and the people who 
use our systems — understand 
that, we'll have a better chance of 
success in making IT work, just 
like those vendors and pundits and 
users say it should. 

Or we'll even make it look easy. B 
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